Security Tools
Essential security tools for developers and security professionals. Generate strong random passwords with custom rules, analyze password strength with entropy and crack time estimates, create MD5, SHA-1, SHA-256 and SHA-512 hashes, encrypt and decrypt text with AES-256, DES, TripleDES and RC4, generate HMAC authentication codes, hash passwords with bcrypt, generate RSA public/private key pairs in PEM format, create random hex, base64 and alphanumeric tokens, generate Subresource Integrity hashes for external scripts, build Content-Security-Policy headers visually, decode SSL/TLS X.509 certificates, and generate and validate TOTP codes for two-factor authentication.
Generate and verify bcrypt password hashes with an adjustable cost factor. Everything runs in your browser, so passwords never leave your device.
Generate RSA public and private key pairs in PEM format with custom key sizes, encryption or signing types, and a SHA-256 fingerprint.
Generate time-based one-time passwords for two-factor authentication from a Base32 secret. Supports SHA-1, SHA-256, SHA-512 with QR import and multi-account management.
Build a Content-Security-Policy header visually with a directive builder, preset templates, live security warnings, and output for Apache, Nginx, PHP, and more.
Decode and inspect PEM-encoded X.509 SSL/TLS certificates in your browser. View subject, issuer, validity, public key, fingerprints, and extensions.
Generate and verify HMAC authentication codes with 8 algorithms (SHA-256, SHA-512, SHA3, MD5, and more). Sign and check webhook and API signatures instantly.
Encrypt and decrypt text online with AES, DES, TripleDES, and RC4. Set a secret key and IV, choose Base64 or Hex output, and keep everything in your browser.
Check how strong your password is with a real-time score, entropy in bits, crack-time estimates, and actionable tips to improve it.
Generate secure random tokens in Hex, Base64, Base64URL, alphanumeric, and custom formats for API keys, session tokens, and secrets.
Generate Subresource Integrity hashes to verify that scripts and stylesheets loaded from a CDN haven't been tampered with.
Generate MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes from text or files. Compare hashes to verify file integrity, all in your browser.
Generate strong random passwords and memorable passphrases with adjustable length, character options, a strength meter, and bulk export.