Security Tools

A list of our Security tools. Nothing you enter is sent to a server; it is all processed in your browser.

• Password Strength Checker

  Rates a password by length, character types, and weak patterns like sequences and keyboard runs, and estimates how long it would take to crack.

• Text Encryptor & Decryptor

  Encrypt text with a password using AES-256-GCM and share it as Base64, then decrypt it with the same password.

• File Encryptor & Decryptor

  Encrypt a file with a password using AES-256-GCM and save it as .enc, then decrypt it with the same password.

• HMAC Generator

  Compute HMAC-SHA1/256/384/512 signatures from a message and secret key, and compare them with a received signature.

• JWT Generator

  Generate HMAC-signed JWTs (HS256/HS384/HS512) from a header, payload and secret for API auth debugging and learning.

• TOTP Code Generator

  Generate and verify 2FA TOTP codes from a Base32 secret or an otpauth:// URI, for debugging and testing.

• Bcrypt Hash Generator & Verifier

  Generate a bcrypt hash from a password and verify it against an existing hash, with an adjustable cost factor.

• X.509 Certificate Decoder

  Paste a PEM SSL/TLS certificate to read its issuer, validity dates, SANs, public key, and fingerprints.

• SSH Key Fingerprint Viewer

  Compute the SHA256 and MD5 fingerprint of an SSH public key, including multi-line authorized_keys.

• Key Pair Generator

  Generate RSA, ECDSA, or Ed25519 public/private key pairs in PEM format. Keys are created in your browser and never sent.

• CSP & SRI Hash Generator

  Build a Content-Security-Policy per directive and copy it as nginx, Apache, or _headers config. Also generates SRI integrity hashes and tags.

• Passphrase Generator (Diceware)

  Generate memorable Diceware passphrases from the EFF large wordlist (7,776 words), with word count, separator and entropy options.

• SPF & DMARC Record Generator

  Build SPF and DMARC TXT records and check existing ones for the 10-lookup limit, +all, and pct errors. No DNS queries.

• Email Header Analyzer

  Paste raw email headers to trace the Received path and hop delays, read SPF, DKIM and DMARC results, and spot From mismatches.

• Shamir's Secret Sharing (Split & Combine)

  Split a text secret into n shares and recover it from any k of them with Shamir secret sharing. Runs in your browser.

• RSA Encrypt & Decrypt

  Encrypt with a PEM public key using RSA-OAEP and decrypt with the private key

• Digital Signature Tool

  Create and verify digital signatures with RSA-PSS or ECDSA using PEM keys. Output is Base64.