Tools
67 tools for passwords, hashes, JWTs, encryption and keys. Everything runs in your browser.
67 tools
Passwords & Security
- Password GeneratorCryptographically random passwords with rules for upper- and lowercase letters, digits and symbols.
- Strong Password GeneratorLong random passwords for master passwords and critical accounts; 20+ characters recommended, with adjustable length and character types.
- Passphrase GeneratorMemorable passphrases made of words picked at random, without repetition, from a Turkish or English word list.
- PIN GeneratorRandom numeric PINs with rules for repeated and sequential digits; digits can be excluded.
- Password Strength CheckerRates how guessable a password is with the zxcvbn pattern model; it does not claim an exact cracking time.
- Password Entropy CalculatorComputes the theoretical upper bound of the search space from the character pool size and length.
- Password Policy CheckerChecks a password against a local policy (length and character rules); not a certificate of compliance with any standard.
- SHA-1 Prefix CalculatorComputes the SHA-1 prefix locally; it does not query any breach database.
- Password Hash VerifierChecks whether text matches an MD5, SHA-1 or SHA-256 hash, or an encoded bcrypt, Argon2, scrypt or PBKDF2 hash.
- Password Match CheckerChecks whether two passwords are exactly identical with a full byte comparison.
Password Hashing & KDF
- bcrypt Hash GeneratorAdaptive, salted password hashing based on Blowfish ($2b$ format).
- bcrypt Hash VerifierChecks whether a password matches a stored bcrypt hash string.
- Argon2id Hash GeneratorThe recommended variant of Argon2, winner of the Password Hashing Competition; memory-hard and resistant to side channels.
- Argon2id Hash VerifierChecks a password against an encoded Argon2id hash with its salt and parameters.
- Argon2i Hash GeneratorThe Argon2 variant with data-independent memory access, designed against side-channel and timing attacks.
- Argon2d Hash GeneratorThe Argon2 variant most resistant to GPU attacks but exposed to side channels; prefer Argon2id for password storage.
- scrypt Hash GeneratorA memory-hard KDF that makes hardware-accelerated attacks expensive.
- scrypt Hash VerifierChecks a password against an scrypt hash using its encoded parameters.
- PBKDF2-SHA256 Key DerivationNIST-approved key derivation based on HMAC-SHA-256.
- PBKDF2-SHA512 Key DerivationPBKDF2 with HMAC-SHA-512, efficient on 64-bit processors.
- PBKDF2-SHA1 Key Derivation (Legacy)PBKDF2-HMAC-SHA1 for legacy compatibility only (random salt, 1,300,000 iterations). Not the parameters used for WPA2 keys.
- Password Hash Format IdentifierAnalyzes an unknown hash string to tell whether it looks like bcrypt, Argon2, SHA-256, MD5 and so on.
General-Purpose Hashes
- MD5 Hash Calculator128-bit legacy digest; unsafe for passwords and signatures, usable only as a checksum.
- SHA-1 Hash Calculator160-bit SHA algorithm, broken for collisions; still found in Git objects and legacy systems.
- SHA-224 Hash CalculatorThe 224-bit variant of SHA-2.
- SHA-256 Hash CalculatorThe 256-bit member of SHA-2; used in TLS certificates, code signing and Bitcoin.
- SHA-384 Hash CalculatorThe 384-bit SHA-2 variant (SHA-512 truncated), common in high-assurance profiles.
- SHA-512 Hash CalculatorThe 512-bit member of SHA-2, fast on 64-bit hardware.
- SHA3-224 Hash Calculator224-bit NIST SHA-3 hash built on the Keccak sponge construction.
- SHA3-256 Hash Calculator256-bit NIST SHA-3 hash built on Keccak.
- SHA3-384 Hash Calculator384-bit NIST SHA-3 hash built on Keccak.
- SHA3-512 Hash Calculator512-bit NIST SHA-3 hash built on Keccak.
- BLAKE2b Hash CalculatorA fast modern hash for 64-bit platforms, faster than SHA-2 in software.
- BLAKE3 Hash CalculatorA modern hash with a Merkle-tree structure that can process input in parallel on many cores.
- Checksum Verifier (CRC32, Adler-32)32-bit CRC and Adler-32 checksums for transfer and file integrity checks.
- Keccak-256 Hash Calculator (Ethereum)The original Keccak-256 used by Ethereum and EVM smart contracts; not identical to SHA3-256.
- RIPEMD-160 Hash Calculator (Bitcoin)The hash used to derive Bitcoin addresses (HASH160 = RIPEMD-160 of SHA-256).
JWT, Tokens & Encoding
- JWT GeneratorSigns a JSON payload with HS256 (HMAC-SHA256) using a secret of at least 32 bytes.
- JWT DecoderDecodes a JWT in the browser and shows its header, payload and timestamps instantly.
- JWT Signature VerifierChecks whether a JWT is valid for a given secret, including its time claims.
- UUID Generator (v4 / v7)Generates random UUID v4 and time-ordered UUID v7 identifiers.
- NanoID GeneratorA compact (21-character), URL-safe and cryptographically random ID.
- Base64 Encoder / DecoderEncodes UTF-8 text to standard Base64 or decodes it back.
- Hex Encoder / DecoderConverts between text and its hexadecimal (0-9a-f) bytes in both directions.
- URL Encoder / DecoderMakes special characters URL-safe with percent-encoding, or decodes them.
- HTML Entity Encoder / DecoderConverts < > & " ' to HTML entities, or entities back to text.
- Secure Random Token GeneratorGenerates a 256-bit cryptographically random token in hex and Base64URL.
- TOTP Code GeneratorGoogle Authenticator-compatible, 30-second, 6-digit time-based 2FA codes.
- HOTP Code GeneratorCounter-based HMAC one-time password generator.
- API Key GeneratorGenerates a hex API key with a local_ prefix from 192 random bits.
- CSRF Token GeneratorA 256-bit token for cross-site request forgery (CSRF) protection.
Encryption & Decryption
- AES-256-GCM Encrypt / DecryptModern authenticated (AEAD) symmetric encryption in Galois/Counter Mode.
- RSA Key Pair Generator3072-bit RSA-OAEP (SHA-256) key pair in SPKI and PKCS#8 PEM format.
- RSA-OAEP Encrypt / DecryptEncrypt with a public key and decrypt with the private key (Optimal Asymmetric Encryption Padding).
- RSA-PSS Sign / VerifyDigital signatures with the Probabilistic Signature Scheme (PSS).
- ECDSA Key Pair GeneratorECDSA key pair on the P-256 curve in SPKI and PKCS#8 PEM format.
- ECDSA Sign / VerifyCompact, fast digital signatures with elliptic-curve key pairs.
- Ed25519 Sign / VerifyFast, deterministic signatures on the twisted Edwards curve (EdDSA).
- Caesar CipherShifts letters a fixed number of places in the alphabet. Educational only; it provides no real security.
- Vigenère CipherA shift that changes with each letter of a keyword. Educational only; it provides no real security.
- ROT13 Encoder / DecoderShifts Latin letters by 13; applying it again restores the text. Obfuscation, not encryption.
Keys & Crypto Utilities
- HKDF Key DerivationHMAC-based extract-and-expand key derivation (used in TLS 1.3 and Signal).
- HMAC Generator (SHA-256 / SHA-512)Computes a message authentication code from a secret key and data.
- HMAC VerifierVerifies an HMAC. The JavaScript runtime does not guarantee constant-time comparison.
- Public Key Fingerprint CalculatorSHA-256 fingerprint of the DER bytes of an SPKI PEM public key.
- PEM Certificate / Key InspectorParses -----BEGIN CERTIFICATE / PRIVATE KEY----- blocks and shows their type and bytes.
- ECDH Shared Secret DemoSimulates two parties deriving a shared secret over an insecure channel.