Security Tools

17 tools

Security tools including hash generation, password strength checking, encryption utilities, and JWT decoding. Everything runs in your browser for maximum security.

Password Generator

Generate cryptographically secure passwords and EFF-wordlist passphrases with CSPRNG randomness and real-time entropy analysis — fully local.

Password Strength Analyzer

Analyze password strength with entropy bits, crack-time estimates, and detection of dictionary words and predictable patterns — nothing uploaded.

Bcrypt Hash Generator

Generate and verify bcrypt password hashes with configurable cost factor and automatic salting. OWASP-aligned defaults — computed in your browser.

AES Encrypt/Decrypt Text

Securely encrypt and decrypt text using AES-256 GCM in your browser. Supports PBKDF2 passwords, raw hex keys, and custom initialization vectors.

BIP39 Mnemonic Generator

Generate and validate BIP39 mnemonic seed phrases with multi-language wordlists and optional passphrase protection — CSPRNG entropy, offline.

Digital Signature Validator

Verify X.509 certificates and PKCS#7/CMS signature containers with detailed ASN.1 structural analysis — accepts .crt, .pem, .sig, .p7s locally.

RSA Key Pair Generator

Generate RSA-2048, RSA-3072, or RSA-4096 key pairs via Web Crypto, exported as PEM (PKCS#8/SPKI) or JWK with SHA-256 fingerprints — fully local.

File Checksum Calculator

Calculate high-performance file checksums (MD5, SHA-1, SHA-256, SHA-512, BLAKE3) 100% in your browser. Supports large files and batch verification.

HMAC Generator

Generate secure HMAC codes using SHA-256, SHA-512, BLAKE3, and more. 100% private, client-side generation with support for Hex and Base64 inputs.

JWT Signature Architect

Create, sign, and debug JSON Web Tokens instantly. Supports HS256, RS256, and EdDSA. Built-in key generation, claim templates, and security auditing. 100% private.

JWT Security Sandbox

Instantly decode and verify JSON Web Tokens (JWT) locally. Supports JWS signatures, JWE decryption, and real-time claim analysis. 100% private.

TOTP/HOTP Code Generator

Generate and verify TOTP and HOTP codes with configurable algorithm, digits, and period, live countdown, and otpauth QR export — Web Crypto.

SAML Response/Request Decoder

Decode SAML Responses and Requests with auto-detection of Base64, DEFLATE, and raw XML. Extracts issuer, subject, attributes, and certs — local.

Secure Notes

Write notes encrypted with AES-256-GCM and PBKDF2-derived keys, stored in local IndexedDB with auto-lock on inactivity and JSON export — local.

PII Detector & Anonymizer

Detect and anonymize PII — emails, phones, SSNs, credit cards, IPs, IBANs — with Luhn validation and mask, redact, or hash modes — fully local.

String Obfuscator

Obfuscate JavaScript strings via array extraction plus Base64, Unicode, hex, or char-code encoding. Reversible, still-runnable output — local.

SSL Certificate Checker

Audit SSL/TLS certificates, security headers, and CAA records. Shows issuer, expiration countdown, HSTS/CSP status, and an A+ to F security grade.