Crypto & Security

Cryptographic SHA hash generators, JWT token decoders, and browser-based security utilities.

Available Tools (60)

← Back to all tools

Encoding & Data Compression

Base64 Encoder & Decoder

Encode converts well-formed Unicode text to UTF-8 bytes and maps each three-byte group to four standard Base64 characters. Decode reverses the byte mapping and then requires valid UTF-8. A leading U+FEFF character is preserved as text instead of silently removed.

URL Component Encoder & Decoder

Encode one URL component as UTF-8 percent escapes or decode one layer. Includes live output, examples and clipboard copying.

Gzip & Deflate Compressor (fflate)

Compresses UTF-8 text using DEFLATE, with a gzip wrapper, a zlib wrapper or no wrapper. Compression returns Base64; decompression returns UTF-8 text and checks wrapper integrity.

Brotli Decompressor (WASM)

Decode one Base64 Brotli stream to UTF-8 text locally, with size limits, cancellation and complete-result copying.

Punycode & IDN Domain Converter

Punycode & IDN Domain Converter: Converts dot-separated IDN labels between Unicode and canonical ACE `xn--` forms without DNS resolution.

UUEncode & UUDecode Converter

Converts UTF-8 text to traditional UUEncode. Each data line holds at most 45 bytes, encoded as four characters per three bytes, between a begin header and a zero-length line followed by end. Decoding restores UTF-8 text.

Hex to Base64 & Base64 to Hex

Converts byte pairs written in hexadecimal to standard Base64, or decodes Base64 back to lowercase hexadecimal. No character-set conversion is applied to these bytes.

Binary Bits (0/1) to Text & ASCII

Converts each UTF-8 byte to exactly eight binary digits. Decoding assembles bytes and validates the complete UTF-8 sequence, including Chinese and emoji.

CSS Entity Escaper & Unescaper

CSS Entity Escaper & Unescaper: Applies CSSOM `CSS.escape()` specification rules, prepending backslashes to punctuation characters.

XML Entity Escaper & Unescaper

XML Entity Escaper & Unescaper: Replaces `<`, `>`, `&`, `"`, and `'` with XML standard entities `&lt;`, `&gt;`, `&amp;`, `&quot;`, `&apos;`.

LZ-String Compressor & Decompressor

LZ-String Compressor & Decompressor: Applies LZ-based dictionary compression designed by pieroxy for compact browser storage.

Hex Byte Array Formatter

Hex Byte Array Formatter: Tokenizes hex bytes, prepends `0x` prefixes, and wraps inside array brackets with comma formatting.

UUID Timestamp & MAC Extractor

UUID Timestamp & MAC Extractor: Reconstructs 60-bit 100-nanosecond timestamp count since Oct 15, 1582 and extracts 48-bit MAC node address.

Authentication & Security Tokens

Regex Tester

The browser compiles the pattern with JavaScript RegExp and runs it after you press Test expression. Results show the matched text, its zero-based UTF-16 start index and captured groups. This is matching only: there is no replacement editor, syntax highlighter or pattern cheat sheet.

JWT Decoder

Decode JSON Web Tokens (JWT) to inspect headers, payload claims, expiry, and signature structure in this page’s tool workspace. Ordinary site requests, extensions, and managed-device services are separate paths.

Password Strength & Crack Time Meter

Password Strength & Crack Time Meter: Analyzes character diversity (lower, upper, digits, symbols), dictionary words, and calculates crack time against GPU clusters.

TOTP 2FA Token Generator & Verifier

TOTP 2FA Token Generator & Verifier: Computes time counter T = floor(timestamp / 30), generates HMAC-SHA1 digest, and extracts 6-digit dynamic truncation code.

HOTP One-Time Password Generator

HOTP One-Time Password Generator: Computes HMAC-SHA1 across 8-byte big-endian counter value and performs dynamic truncation.

Cryptographic Random Bytes Generator

Cryptographic Random Bytes Generator: Fills Uint8Array buffer with entropy from browser `crypto.getRandomValues()` CSPRNG pool.

SAML Response XML Decoder

SAML Response XML Decoder: Decodes Base64 container, formats XML structure, and extracts Issuer, Subject, Assertion, and Signature blocks.

Diceware Passphrase Generator

Generate 1–20 random words from EFF’s 7,776-word list and inspect the word count and estimated random bits.

HTTP Basic Auth Header Generator

Encodes a JSON username and password as UTF-8 username:password bytes, then Base64 with the Basic prefix. Decoding splits at the first colon and returns username and credentials, where credentials is the complete password including any later colons.

URL Payload Security Inspector

URL Payload Security Inspector: Inspects query parameters and path segments for double decoding flaws, directory traversal (`./`), and script injections.

Chinese Idiom Passphrase Generator

Chinese Idiom Passphrase Generator: Samples 4 four-character idioms from an authoritative idiom corpus using CSPRNG entropy.

Referrer-Policy Header Builder

Referrer-Policy Header Builder: Validates W3C Referrer Policy specification directives and outputs standard HTTP response header.

Permissions-Policy Header Builder

Permissions-Policy Header Builder: Constructs W3C Feature Policy / Permissions Policy header directives restricting browser capabilities.

Cryptographic Hashes & Integrity

SHA Hash Generator

Generate cryptographic hashes including SHA-256, SHA-512, MD5, and SHA-1 directly in your browser using the Web Crypto API.

MD5 Hash Generator

MD5 Hash Generator: Executes standard RFC 1321 MD5 hashing algorithm in browser memory.

SHA-3 & Keccak Hash Generator

SHA-3 & Keccak Hash Generator: Executes Keccak-256 sponge construction hashing and extracts the first 4 bytes as function selector.

HMAC Keyed-Hash Generator

HMAC Keyed-Hash Generator: Computes keyed-hash message authentication code using Web Crypto SubtleCrypto.sign with HMAC algorithm.

Bcrypt Hash Generator & Verifier

Bcrypt Hash Generator & Verifier: Generates 128-bit random salt and computes Blowfish-based key expansion across 2^10 (1024) iterations.

Argon2 Password Hash Simulator

Argon2 Password Hash Simulator: Simulates Argon2id memory-hard matrix filling algorithm (RFC 9106) designed to resist GPU/ASIC attacks.

CRC32 & CRC16 Checksum Calculator

CRC32 & CRC16 Checksum Calculator: Evaluates CRC32 standard polynomial 0xEDB88320 using pre-computed 256-entry lookup table.

Adler-32 Checksum Calculator

Adler-32 Checksum Calculator: Iterates two 16-bit modulo-65521 running sums: A = (1 + Σ D_i) mod 65521, B = (Σ A_i) mod 65521.

BLAKE2 Hash Generator

BLAKE2 Hash Generator: Executes BLAKE2b permutation rounds optimized for 64-bit word architectures.

BLAKE3 Hash Generator (WASM)

BLAKE3 Hash Generator (WASM): Executes 7-round BLAKE3 Merkle tree compression algorithm.

MurmurHash3 Calculator

MurmurHash3 Calculator: Applies 32-bit mixing constants c1=0xcc9e2d51, c2=0x1b873593, bitwise rotations, and avalanching finalizer.

FNV-1a Hash Calculator

FNV-1a Hash Calculator: Multiplies running hash by FNV prime and XORs with byte values (offset basis: 0x811c9dc5).

Bcrypt Work Factor Benchmark

Bcrypt Work Factor Benchmark: Executes password hashing iterations measuring exact millisecond duration via performance.now().

Encryption & Ciphers

AES Encryption & Decryption (Web Crypto)

AES Encryption & Decryption (Web Crypto) — PBKDF2-HMAC-SHA256 derives a 32-byte key with 120000 iterations and a 16-byte salt. AES-GCM uses a 12-byte IV and appends its 16-byte authentication tag to the ciphertext before Base64 encoding.

RSA Key Pair Generator (Web Crypto)

RSA Key Pair Generator (Web Crypto): Invokes Web Crypto API `crypto.subtle.generateKey` with RSASSA-PKCS1-v1_5 and exports SPKI/PKCS#8 PEM blocks.

RSA Encrypt & Decrypt Tool

RSA Encrypt & Decrypt Tool: Imports RSA public key via SubtleCrypto, applies Optimal Asymmetric Encryption Padding (OAEP), and outputs ciphertext.

RSA Signature Generator & Verifier

RSA Signature Generator & Verifier: Computes SHA-256 digest of data, applies RSA private key signing exponent, and verifies signature with public key.

ECC & Ed25519 Key Pair Generator

ECC & Ed25519 Key Pair Generator: Invokes Web Crypto API to generate ECDSA key pair on NIST P-256 prime curve.

XOR Cipher & Bitwise Operator

XOR Cipher & Bitwise Operator: Applies bitwise XOR (`char ^ key`) across every character byte in the input string.

PBKDF2 Key Derivation Explorer

PBKDF2 Key Derivation Explorer: Executes standard PKCS#5 PBKDF2 key derivation using HMAC-SHA256 across 100,000 recursive iterations.

Scrypt Key Derivation Tool

Scrypt Key Derivation Tool: Executes Scrypt memory-hard algorithm (RFC 7914) requiring sequential memory allocation.

Shamir's Secret Sharing (SSS) Simulator

Shamir's Secret Sharing (SSS) Simulator: Constructs a random degree-(k-1) polynomial over Galois Field GF(256) and evaluates points (x, f(x)).

HKDF Key Derivation Tool (RFC 5869)

HKDF Key Derivation Tool (RFC 5869): Computes PRK = HMAC-Hash(salt, IKM) and expands into cryptographically independent subkeys.

ChaCha20-Poly1305 AEAD Tool

ChaCha20-Poly1305 AEAD Tool: Executes 20-round ChaCha stream cipher and computes one-time Poly1305 128-bit authentication tag.

Ed25519 Signature Generator & Verifier

Ed25519 Signature Generator & Verifier: Computes Ed25519 Edwards-curve digital signature (RFC 8032) in browser memory.

Web Crypto API Capabilities Inspector

Web Crypto API Capabilities Inspector: Queries available cryptographic primitives: AES-GCM, RSA-PSS, ECDSA (P-256, P-384), SHA-256, and HKDF.

Tool category