Security & Cryptography Tools

Free browser-based security tools for passwords, hashing, API keys, JWTs, TLS certificates, and CSP headers.

Password generation, password strength checking, hashing, and JWT decoding all involve sensitive input, so these run client-side by design — a generated password, a string you're hashing, or a token's secret never crosses the network. The password checker's breach lookup is the one exception worth knowing about: it uses a k-anonymity approach so your full password (or even a full hash of it) is never transmitted.

Security

Passwords & Secrets

Password Generator

Create strong, random passwords with full control over length, character sets, and rules like no repeats.

Password Checker

Check a password's strength, estimated crack time, and whether it's appeared in a known data breach.

API Key Generator

Generate random API keys or secrets in hex, base64url, UUID-like, or a custom prefixed format.

Hashing

Hash Generator

Hash text, JSON, or files with MD5, SHA-1, SHA-256, SHA-384, or SHA-512, checked and saved automatically.

Hash Lookup

Paste a hash to see if it's already known, and which algorithm produced it.

.htpasswd Generator

Generate a bcrypt or SHA1 .htpasswd line for Nginx or Apache Basic Auth.

Tokens

JWT Decoder

Decode a JWT's header and payload, and optionally verify an HMAC signature locally.

TOTP Generator

Generate live 6-digit TOTP codes from a Base32 secret, for testing 2FA integrations.

TLS & Web Security

SSL Certificate Checker

Check a domain's TLS certificate, its expiry, and its subject alternative names.

CSP Header Builder

Build a Content-Security-Policy header interactively, directive by directive.