Security Tools
Encrypt, hash and test security on your own device — your secrets never leave the browser.
25 free tools · everything runs in your browser
Keyword Password Generator
Turn a memorable keyword into a strong password with symbols, numbers and length options.
Open ToolSSL Certificate Format Converter
Convert certificates between PEM, DER and P7B formats. Detect key and certificate types.
Open ToolSSL Certificate Decoder
Paste a PEM certificate and decode its subject, issuer, validity dates and key details.
Open ToolSSL Certificate Generator
Create a self-signed SSL/TLS certificate right in your browser. Generate a PEM key + cert.
Open ToolHTTP Security Headers Analyzer
Paste your response headers and get a security grade with fixes for missing headers.
Open ToolFile Hash Checker
Calculate and verify file hashes (MD5, SHA-1, SHA-256). Ensure file integrity.
Open ToolPassword Breach Check
Check whether a password appears in known data breaches using the HIBP range API — only the first 5 hash characters ever leave your browser.
Open ToolJWT Generator
Create, sign and inspect HS256 JSON Web Tokens with custom claims using WebCrypto, entirely offline.
Open ToolHash Cracker
Educational tool: try a wordlist against MD5, SHA-1 or SHA-256 hashes to show how weak passwords fall fast.
Open ToolPGP Message Decoder
Decode and verify ASCII-armored PGP messages, public keys and signatures with OpenPGP.js.
Open ToolTOTP Authenticator
Generate 2FA TOTP codes from any base32 secret with a live countdown and multiple saved accounts.
Open ToolSecret Scanner
Scan pasted code or .env files for API keys, tokens, passwords and AWS keys with pattern-based detection.
Open ToolEmail Header Analyzer
Paste raw email headers to trace the delivery path, SPF, DKIM and DMARC results, origin IP and spam signals.
Open ToolHash Identifier
Identify the hash algorithm behind any hash by length, charset and pattern — MD5, SHA family, bcrypt and more.
Open ToolLuhn Checker
Validate credit card and ID numbers with the Luhn checksum and detect the possible card network.
Open ToolAES Encrypt / Decrypt
Encrypt and decrypt text with AES-256-GCM using a password-derived key (PBKDF2) — everything runs in your browser.
Open ToolHMAC Generator
Compute HMAC signatures (SHA-256/512/384/1) of any message with a secret key for API signing and webhook verification.
Open Tool