Security Tools

Generate MD5, SHA-1, SHA-256, and SHA-512 hashes simultaneously in your browser, HEX or Base64, with hash verification.

Generate HMAC-SHA1/256/512 signatures simultaneously, HEX or Base64, key strength indicator, verify mode.

Hash passwords with bcrypt and verify them, configurable cost rounds with time estimates, side-by-side.

Generate cryptographically random passwords with entropy bits and strength rating.

Generate UUID v4 (random), v7 (time-ordered, best for database PKs), or v1 (time-based).

Check the strength of a password: entropy, character sets, common patterns, and crack-time estimate.

Generate signed JWTs with HS256/HS384/HS512. Set custom payload, expiry, issuer, subject, and audience.

Generate cryptographically secure HMAC secret keys for HS256/384/512 JWTs, RFC 7518 compliant, with ready .env, Node.js, Python snippets.

Generate TOTP/HOTP codes from a Base32 secret, or generate a new secret. Compatible with Google Authenticator.

Generate RSA key pairs (2048/4096-bit) entirely in your browser using the Web Crypto API. Never leaves your device.

Encrypt or decrypt text with AES-GCM (128/192/256-bit) and PBKDF2 key derivation. 100% client-side.

Generate a PKCS#10 Certificate Signing Request (CSR) and matching private key for SSL/TLS certs. RSA or ECDSA, with Subject Alternative Names.

Generate ULIDs: sortable, URL-safe 26-character identifiers combining a millisecond timestamp with 80 bits of randomness.

Generate NanoIDs: compact, URL-safe, cryptographically random unique IDs with a configurable size and alphabet.

Generate CUID2 identifiers: collision-resistant, horizontally scalable, secure IDs designed for use as database primary keys.

Decode a PEM/X.509 certificate: subject, issuer, validity window, Subject Alternative Names, key algorithm, and fingerprints. 100% client-side.

Generate an Ed25519 or RSA SSH key pair in your browser: OpenSSH-format public key, private key, and SHA-256 fingerprint. Never leaves your device.

Sign a JWT with RSA (RS256/384/512) or ECDSA (ES256/384) asymmetric keys. Generates a fresh key pair per sign, entirely in your browser.

Convert a JSON Web Key (JWK) to PEM format or back: RSA, ECDSA, or Ed25519, public or private. Done entirely in your browser.

Drop a file and compute its MD5, SHA-1, SHA-256, and SHA-512 checksums to verify integrity. 100% client-side, the file never leaves your browser.

A visual wizard for AWS S3 bucket policies: live JSON preview, risk warnings, and presets for public sites, IAM access, and CloudFront.