Security Tools

Generate cryptographically secure passwords and strength metrics.

19 tools in this category

  • Hash Generator

    Generate MD5, SHA-1, SHA-256, and SHA-512 hashes from any text — runs entirely offline.

  • Password Generator

    Generate cryptographically secure passwords with custom length, symbols, and exclusions.

  • TOTP 2FA Code Generator

    Generate RFC 6238 time-based one-time passwords from a base32 secret using Web Crypto. Codes rotate every 30 seconds.

  • AES-256 Encrypt/Decrypt

    Encrypt and decrypt text with AES-256-GCM and PBKDF2 key derivation - a fresh random salt and IV every run.

  • RSA Key Pair Generator

    Create 2048-4096 bit RSA key pairs as PEM with the Web Crypto API - generated and kept entirely on your device.

  • HMAC Generator

    Generate HMAC signatures with SHA-256 or SHA-512 using a secret key — runs fully offline.

  • JWT Generator (HS256)

    Sign test JWTs locally with HS256 via Web Crypto — custom claims, expiry, and issuer, nothing leaves your device.

  • JWT Generator & Client-Side Signer

    Create and cryptographically sign JSON Web Tokens with HMAC-SHA256 offline using native Web Crypto.

  • HTTP Basic & Bearer Auth Header Generator

    Generate RFC 7617 Basic Auth and RFC 6750 Bearer headers with copy-ready cURL, Fetch, Python, and Go code snippets.

  • Bcrypt Hash & Verify

    Hash passwords with bcrypt at configurable cost factors (4-31) and verify strings against existing bcrypt hashes — all in-browser.

  • Scrypt / Argon2id Hasher

    Modern password hashing with scrypt and Argon2id — configure memory, iterations, and parallelism for OWASP-compliant outputs.

  • BIP39 Mnemonic Seed Generator

    Generate cryptographically secure BIP39 mnemonic seed phrases (12/15/18/21/24 words) with checksum validation and entropy display.

  • Password Strength Analyzer

    Deep password strength analysis using zxcvbn scoring — crack time estimates, pattern detection, and actionable improvement suggestions.

  • PGP / GPG Key Pair Generator

    Generate RSA or ECC PGP key pairs in-browser with OpenPGP.js — export public and private keys in ASCII-armored format.

  • CSP Header Generator

    Build Content-Security-Policy headers interactively — configure directives for scripts, styles, images, fonts, frames, and report-uri.

  • CORS Header Builder

    Generate Access-Control-Allow-Origin, Methods, Headers, and Credentials CORS response headers with preset configurations.

  • XOR Cipher Encrypt / Decrypt

    Apply XOR encryption with single-byte or multi-byte keys — supports hex, UTF-8, and Base64 key formats with brute-force analysis.

  • JWT Secret Brute-Force Checker

    Test common weak secrets and custom wordlists against a JWT's HMAC signature to verify if a secret is guessable.

  • Entropy / Randomness Analyzer

    Calculate Shannon entropy, chi-squared, mean byte value, and Monte Carlo Pi for input data to detect encryption or compression.