Security & Crypto Tools

Generate hashes and HMACs, encrypt files, create SSH keys, decode certificates, check a password against breach lists and test its strength — all computed locally with the Web Crypto API. Because nothing leaves your browser, these are safe to use with sensitive input.

SSL Certificate Decoder

Decode an X.509 / SSL certificate from PEM and read its subject, issuer, validity, SANs, key details and fingerprints. Runs entirely in your browser.

Open SSL Certificate Decoder → Guide
Certificate to CSR

Paste a PEM certificate to generate an OpenSSL command that creates a matching CSR (with a new private key), reusing the subject and SANs. Runs in your browser.

Open Certificate to CSR → Guide
Password Generator

Generate strong, random passwords in your browser — choose length, symbols and numbers, with a live strength meter. Nothing is uploaded.

Open Password Generator → Guide
Password Strength Checker

Check how strong your password is and how long it would take to crack. See its entropy, weaknesses and fixes — entirely in your browser.

Open Password Strength Checker → Guide
Hash Generator

Generate SHA-1, SHA-256, SHA-384 and SHA-512 hashes of text or a file, live, using your browser's Web Crypto API. Private and offline — nothing is uploaded.

Open Hash Generator → Guide
HMAC Generator

Generate an HMAC from a message and secret key using SHA-1, SHA-256, SHA-384 or SHA-512. Hex or Base64 output, computed entirely in your browser.

Open HMAC Generator → Guide
AES Text Encryption

Encrypt and decrypt text with a password using AES-256-GCM, right in your browser. Standards-based, with a PBKDF2-derived key — nothing is uploaded.

Open AES Text Encryption → Guide
TOTP Generator

Generate time-based one-time passwords (TOTP) from a Base32 secret — the same 2FA codes as Google Authenticator. Live countdown, all in your browser.

Open TOTP Generator → Guide
.htpasswd Generator

Generate .htpasswd entries for Apache and nginx basic auth — bcrypt, Apache MD5 (apr1) or SHA-1. Hashed entirely in your browser, never uploaded.

Open .htpasswd Generator → Guide
Password Leak Checker

Check if a password has appeared in a data breach. It is hashed locally and only a 5-character hash prefix is sent (k-anonymity) — never the password.

Open Password Leak Checker → Guide
SSH Key Generator

Generate an Ed25519 or RSA 4096 SSH key pair in OpenSSH format, entirely in your browser. The private key is created on your device and never uploaded.

Open SSH Key Generator → Guide
Email Auth Checker

Check a domain's SPF, DKIM and DMARC records and get plain-English fixes. Fetched live over DNS-over-HTTPS in your browser — only the domain name is sent.

Open Email Auth Checker → Guide
CSP Builder & Analyzer

Analyze a Content-Security-Policy for weak directives with plain-English fixes, or build a strict CSP from a safe baseline. Runs in your browser.

Open CSP Builder & Analyzer → Guide
File Encryptor

Encrypt or decrypt any file with a password using AES-256-GCM, entirely in your browser. The file and password never leave your device — nothing is uploaded.

Open File Encryptor → Guide
CSR Decoder

Decode a PKCS#10 Certificate Signing Request in your browser: subject, Subject Alternative Names, key type and size, signature algorithm. Nothing uploaded.

Open CSR Decoder → Guide
CVSS Calculator

Score a vulnerability with CVSS v3.1: click the base and temporal metrics for a score, severity and vector string, or parse an existing vector. Runs locally.

Open CVSS Calculator → Guide
SRI Hash Generator

Generate a Subresource Integrity hash for a JS or CSS file and get a ready-to-paste tag with integrity and crossorigin. SHA-256/384/512, in-browser.

Open SRI Hash Generator → Guide

Security & Crypto Tools

Other categories