All Tools

Generate and verify bcrypt password hashes with an adjustable cost factor. Everything runs in your browser, so passwords never leave your device.

Generate RSA public and private key pairs in PEM format with custom key sizes, encryption or signing types, and a SHA-256 fingerprint.

Generate time-based one-time passwords for two-factor authentication from a Base32 secret. Supports SHA-1, SHA-256, SHA-512 with QR import and multi-account management.

Build a Content-Security-Policy header visually with a directive builder, preset templates, live security warnings, and output for Apache, Nginx, PHP, and more.

Decode and inspect PEM-encoded X.509 SSL/TLS certificates in your browser. View subject, issuer, validity, public key, fingerprints, and extensions.

Generate and verify HMAC authentication codes with 8 algorithms (SHA-256, SHA-512, SHA3, MD5, and more). Sign and check webhook and API signatures instantly.

Encrypt and decrypt text online with AES, DES, TripleDES, and RC4. Set a secret key and IV, choose Base64 or Hex output, and keep everything in your browser.

Check how strong your password is with a real-time score, entropy in bits, crack-time estimates, and actionable tips to improve it.

Generate secure random tokens in Hex, Base64, Base64URL, alphanumeric, and custom formats for API keys, session tokens, and secrets.

Generate Subresource Integrity hashes to verify that scripts and stylesheets loaded from a CDN haven't been tampered with.

Run multiple countdown timers simultaneously. Create, name, and color-code timers for cooking, workouts, studying, or any timed activities.

Online stopwatch and countdown timer with centisecond precision, unlimited lap recording, browser notifications, fullscreen mode, and keyboard shortcuts. Works offline and saves your settings.