🔐 Security
Cryptography and security utilities — hash generators (SHA, MD5, bcrypt, Argon2), HMAC and AES encryption/decryption, JWT debugging, password and passphrase generation, SSH and WireGuard key generators, security.txt and CSP policy builders, OpenSSL command generation, and certificate decoders. All computation stays in your browser.
🔍 AI Code Security Scanner
Scan JavaScript and TypeScript code for security issues — hardcoded secrets, SQL injection, XSS, path traversal, and eval usage.
🔍 Email Header Forensics
Analyze email headers for delivery path, SPF/DKIM/DMARC checks, and spoofing detection
🔍 Homoglyph Detector
Detect homoglyph and mixed-alphabet characters in domains and text to spot phishing and spoofing attacks. Shows confusable Unicode characters with their codepoints and meanings.
🔍 ReDoS Scanner
Scan regular expressions for catastrophic backtracking vulnerabilities — detect dangerous patterns, generate attack strings, and measure matching performance.
🔍 SSL Certificate Decoder
Paste a PEM certificate and inspect all fields: issuer, subject, SANs, validity, serial, signature algorithm, and public key.
🔎 Hash Identifier
Identify hash type from a string — MD5, SHA-1, SHA-256, SHA-512, bcrypt, NTLM and more
🔏 SRI Hash Generator
Generate Subresource Integrity hashes for CDN scripts and stylesheets — sha256, sha384, sha512
🔏 TOTP Code Generator
Generate 2FA TOTP codes from a secret key. Paste an otpauth URI or base32 secret and get the 6-digit code with a live countdown.
🔐 Argon2 Generator
Hash a password with Argon2id, Argon2i or Argon2d — set memory, iterations and parallelism, or verify a password against an existing Argon2 hash.
🔐 Htpasswd Generator
Generate htpasswd entries for Apache/Nginx basic authentication — bcrypt, MD5, SHA-1, crypt
🔐 OpenSSL Command Generator
Generate OpenSSL commands: self-signed certs, CSRs, certificate inspection, key management, and protocol testing.
🔐 Passkey Playground
Explore WebAuthn passkeys — create, inspect credential structure, and test authentication in your browser
🔑 RSA Key Generator
Generate RSA public/private key pairs in PEM and JWK format for JWT signing, SSH, and TLS
🔑 SSH Key Generator
Generate an Ed25519 SSH key pair online in OpenSSH format.
🔒 Bcrypt Generator
Hash a password with bcrypt — pick the cost factor and salt rounds, or verify a password against an existing bcrypt hash.
🔒 Password Strength Meter
Check how strong a password really is — entropy bits, estimated offline crack time, weakness flags. Type or paste any password for instant analysis.
🧹 HTML Sanitizer
Strip dangerous HTML tags, attributes, and scripts to prevent XSS — online HTML sanitizer
🛡️ Content-Security-Policy Builder
Build a Content-Security-Policy header online
🛡️ WireGuard Config Generator
Generate WireGuard server and client configs with X25519 keypairs, QR code for mobile import.
AES Encrypt / Decrypt
Encrypt and decrypt text with AES-256-GCM using a passphrase or a raw key. Portable base64 output.
AI Log Sanitizer
Anonymize logs before pasting into AI — strip emails, IPs, API keys, secrets, and PII
Credit Card Validator
Validate credit card numbers with the Luhn algorithm, detect card brand, format, mask, and generate Luhn-valid test numbers.
HMAC Generator
Sign data with a secret key using HMAC-SHA1/256/384/512. Generate signatures for webhooks and APIs, or verify a signature against a payload.
JWT Generator
Generate signed JSON Web Tokens with HS256, HS384, HS512, RS256, or ES256. Build payloads with standard claims.
Password Generator
Generate strong cryptographically secure passwords, memorable passphrases, and PINs — bulk mode, copy-ready, deep-link sharing.
SAML Decoder & Debugger
Decode SAML responses and requests — view formatted XML, extract claims, validate timestamps, and inspect signatures.
Security.txt Generator
Generate a security.txt file (RFC 9116) with contact info, PGP key, disclosure policy, and expiry — ready for /.well-known/security.txt