Security & Auth
Inspect tokens, certificates, hashes, and HTTP security headers locally. Credentials never leave the browser tab.
Tools (13)
JWT Decoder
Decode JSON Web Tokens (JWT) client-side. Inspect header claims, payload data, expiration times, and token signatures.
JWT Generator
Generate and sign JSON Web Tokens (JWT) using HMAC-SHA256, HMAC-SHA384, or HMAC-SHA512.
JWE Decoder
Inspect JSON Web Encryption (JWE) compact tokens locally — header, IV, and part sizes without decrypting.
Hash Generator
Generate cryptographically secure SHA-256, SHA-512, SHA-1, and MD5 message digests client-side.
Bcrypt Hash Generator & Verifier
Generate secure salted Bcrypt password hashes ($2a$) or verify plaintext passwords against existing hashes locally.
Certificate & JWK Inspector
Inspect X.509 PEM certificates, CSRs, private-key fingerprints, and JSON Web Keys locally — without uploading.
HTTP Headers & Security Inspector
Parse HTTP headers, audit critical security headers (HSTS, CSP, X-Frame-Options, CORS), and calculate a security grade.
IP Subnet & CIDR Calculator
Calculate network range, broadcast IP, usable hosts, subnet mask, wildcard mask, and binary breakdown from any CIDR notation.
Password Generator
Generate strong random passwords and EFF wordlist passphrases in your browser, with the entropy of each shown in bits.
HMAC Generator
Compute HMAC signatures for webhooks and API requests, with the key as UTF-8 text, hex, or Base64, and output as hex or Base64.
AES Encrypt & Decrypt
Encrypt and decrypt text with AES-256-GCM and a key derived from your passphrase with PBKDF2-SHA256, entirely in your browser.
RSA, ECDSA & Ed25519 Key Generator
Generate a key pair in your browser with Web Crypto and export it as PEM or JWK, with a SHA-256 fingerprint of the public key.
TOTP Code Generator
Generate the current two-factor code from a Base32 secret or otpauth:// URI, with the previous and next codes for clock skew.