Keys, Certificates & Tokens
Flask Session Signer
Process key or token data with Flask Session Sign and explicit format settings. Enter the key material, choose the required format, then review the result.
This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.
Flask Session Signer performs Flask-style timed cookie signing for the supplied key or certificate data. It returns payload.timestamp.signature with a generated timestamp and URL-safe Base64 segments.
It returns payload.timestamp.signature with a generated timestamp and URL-safe Base64 segments. This result runs in the browser for this catalog category. Processing runs in the browser.
A shared-secret cookie signature protects integrity, not confidentiality, session expiry, or application authorization.
Instructions
- Provide text or data for this tool.
- Use a disposable key and record the selected salt and digest. This applies to Flask Session Signer.
- Copy the complete cookie into Flask Session Verify. This applies to Flask Session Signer.
Example
Input: Use JSON {"demo":true}, Key "public-test" in UTF8, Salt "cookie-session", and Algorithm sha1.
Settings: Flask Session Signer: Input must be JSON, not an existing cookie string. Algorithm selects sha1 or sha256 for the HMAC construction.
Result: It returns payload.timestamp.signature with a generated timestamp and URL-safe Base64 segments.
Limits
- Flask Session Signer: Signing does not encrypt the JSON payload.
- Flask Session Signer: The timestamp can change between runs; identical JSON need not produce an identical cookie.