Security Tools

Everything runs locally. Never paste production keys into shared chats. Use the filter to zero in on a tool.

Showing 14 of 14 tools

AES Encryption / Decryption

Encrypt and decrypt text with AES-GCM or AES-CBC using your own key. All cryptographic operations run locally in your browser.

BCrypt Hash & Verify

Generate bcrypt password hashes with a configurable cost factor, and verify a plaintext password against a bcrypt hash. Everything runs in your browser.

File Checksum Calculator

Compute the SHA-256, SHA-1, SHA-384, or SHA-512 checksum of any local file, with its size. Your file is processed locally and never uploaded.

Hash & HMAC Generator — MD5, SHA-1 to SHA-512

Generate MD5, SHA-1, SHA-256, SHA-384, SHA-512 hashes and HMAC signatures from text or files. Everything runs in your browser via the Web Crypto API.

Hash Generator — MD5, SHA-1, SHA-256 Online

Compute MD5, SHA-1, SHA-256, SHA-384, SHA-512 of any text or file. All hashing happens in your browser.

HMAC Generator — Sign Messages with SHA-256

Compute HMAC-SHA256, HMAC-SHA384, or HMAC-SHA512 signatures for any message and secret key, in hex and base64. Runs locally with Web Crypto.

JWT Decoder — Decode and Verify Tokens

Decode JWT tokens instantly. View header, payload, and signature. Check expiration and verify signatures. 100% browser-based, nothing sent to servers.

JWT Generator & Signer

Build and sign JWTs with HS256, HS384, or HS512 in your browser. Edit header and payload, supply a secret, and get a ready-to-use token. Nothing is uploaded.

Passphrase Generator (Diceware-style)

Generate memorable passphrases from a 256-word diceware-style list, with separators, digits, symbols and live entropy estimates. All randomness is local.

Random Password Generator

Generate strong random passwords with custom length and character sets, plus a live entropy estimate. Everything is generated locally — never transmitted.

Random Token Generator

Generate cryptographically secure random tokens in hex, base64, base64url, or UUID format, using the browser\'s CSPRNG.

RSA Key Pair Generator

Generate RSA key pairs (2048/3072/4096-bit) in your browser with Web Crypto, view PEM output, and encrypt/decrypt text. Private keys never leave your device.

Secret & API Key Scanner

Paste logs or config files to detect leaked credentials — AWS keys, GitHub and GitLab tokens, Stripe, Slack, OpenAI, JWTs and private keys. Scans locally.

X.509 Certificate Decoder

Decode PEM X.509 certificates in your browser — subject, issuer, validity, public key, SANs and extensions. A compact DER/ASN.1 parser, nothing uploaded.

🔒

Your data never leaves your device

All processing happens in your browser. No uploads, no tracking, no servers. Your API keys, configs, and private payloads stay private — 100% client-side.