Security tools
Security tools generate hashes, random passwords and tokens, decode JSON Web Tokens, and encrypt text. They use the Web Crypto API in your browser, so secrets you type are not transmitted.
10 toolsfreeno upload
Start here
Password GeneratorGenerate strong random passwords of 6 to 64 characters in your browser, with a choice of letters, digits, and symbols and an entropy estimate.Hash GeneratorCalculate the MD5, SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512 hashes of any text at once, as one-way digests that cannot be reversed.JWT DecoderDecode a JSON Web Token to read its header, payload, and expiry time, or create an HS256-signed token from a JSON payload and secret.Text EncryptionEncrypt text with a password using AES-256-GCM and a PBKDF2-derived key, or decrypt it again, with all processing done in your browser.API Key / Token GeneratorGenerate random strings for API keys, tokens, and secrets, 1 to 512 characters long, in alphanumeric, hex, or URL-safe Base64 characters.Password Strength CheckerCheck how strong a password is from its length and character variety, with an entropy estimate in bits and suggestions to improve it.
All 10 security tools, A to Z
- API Key / Token GeneratorGenerate random strings for API keys, tokens, and secrets, 1 to 512 characters long, in alphanumeric, hex, or URL-safe Base64 characters.
- Cipher ToolsEncode or decode text with the classical Caesar, ROT13, Atbash, and Vigenère ciphers, for learning and puzzles rather than for security.
- Hash GeneratorCalculate the MD5, SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512 hashes of any text at once, as one-way digests that cannot be reversed.
- JWT DecoderDecode a JSON Web Token to read its header, payload, and expiry time, or create an HS256-signed token from a JSON payload and secret.
- JWT EncoderCreate a signed JSON Web Token from a JSON payload and a secret, using the HS256 algorithm (HMAC with SHA-256) in your browser.
- Password GeneratorGenerate strong random passwords of 6 to 64 characters in your browser, with a choice of letters, digits, and symbols and an entropy estimate.
- Password Strength CheckerCheck how strong a password is from its length and character variety, with an entropy estimate in bits and suggestions to improve it.
- SRI Hash GeneratorGenerate a Subresource Integrity (SRI) hash for a script or stylesheet from its contents, with a ready-to-paste integrity attribute.
- Text EncryptionEncrypt text with a password using AES-256-GCM and a PBKDF2-derived key, or decrypt it again, with all processing done in your browser.
- TOTP / 2FA GeneratorGenerate 6-digit TOTP codes from a Base32 secret, the way an authenticator app does, with the secret kept inside your browser.