Crypto & Security

Cryptographic SHA hash generators, JWT token decoders, and browser-based security utilities.

Encoding & Data Compression Authentication & Security Tokens Cryptographic Hashes & Integrity Encryption & Ciphers Tool category

Available Tools (60)

← Back to all tools

Encoding & Data Compression

Base64 Encoder & Decoder

Convert UTF-8 text or binary files locally with Base64 or Base64URL. Text decoding preserves a leading U+FEFF and requires valid UTF-8; binary decoding preserves arbitrary bytes. Uses native Web APIs, with no added codec library, paid API or data upload by this conversion.

URL Component Encoder & Decoder

Encode one URL component as UTF-8 percent escapes or decode one layer. Includes live output, examples and clipboard copying.

Gzip & Deflate Compressor (fflate)

Compress text or files as Gzip, Zlib or raw DEFLATE with levels 1–9. Restore exact bytes, preview valid UTF-8, compare sizes and download complete files.

Brotli Decompressor (WASM)

Decode one Base64 Brotli stream to UTF-8 text locally, with size limits, cancellation and complete-result copying.

Punycode & IDN Domain Converter

Punycode & IDN Domain Converter: Converts dot-separated IDN labels between Unicode and canonical ACE `xn--` forms without DNS resolution.

UUEncode & UUDecode Converter

Converts UTF-8 text to traditional UUEncode. Each data line holds at most 45 bytes, encoded as four characters per three bytes, between a begin header and a zero-length line followed by end. Decoding restores UTF-8 text.

Hex to Base64 & Base64 to Hex

Converts byte pairs written in hexadecimal to standard Base64, or decodes Base64 back to lowercase hexadecimal. No character-set conversion is applied to these bytes.

Binary Bits (0/1) to Text & ASCII

Converts each UTF-8 byte to exactly eight binary digits. Decoding assembles bytes and validates the complete UTF-8 sequence, including Chinese and emoji.

HTML Entity Escaper for Three Characters

Escapes or unescapes the HTML entities for ampersand, less-than, and greater-than signs. It does not implement CSS.escape or CSS identifier escaping.

XML Entity Escaper & Unescaper

Converts five reserved characters to and from their predefined XML entities. It does not parse or validate XML.

LZ-String Compressor & Decompressor

LZ-String Compressor & Decompressor: Applies LZ-based dictionary compression designed by pieroxy for compact browser storage.

Hex Byte Inspector

Parses hexadecimal byte pairs and reports length, hex, decimal, binary, and indexed rows as JSON. It does not output a C, C++, or Rust array literal.

UUID Timestamp & MAC Extractor

UUID Timestamp & MAC Extractor: Reconstructs 60-bit 100-nanosecond timestamp count since Oct 15, 1582 and extracts 48-bit MAC node address.

Authentication & Security Tokens

Regex Tester

Test JavaScript regular expressions in an isolated Worker. Highlight matches, inspect named groups and preview bounded text replacement.

JWT Decoder

Decode JWT claims locally and inspect exp, nbf and iat dates, relative times and device-clock status without verifying signatures.

Password Strength and Offline Crack-Time Estimate

Estimate a trimmed password with zxcvbn, reporting score 0–4, label, UTF-16 length, an offline slow-hash time estimate and feedback. No entropy or breach check.

TOTP 2FA Token Generator & Verifier

TOTP 2FA Token Generator & Verifier: Computes time counter T = floor(timestamp / 30), generates HMAC-SHA1 digest, and extracts 6-digit dynamic truncation code.

HOTP One-Time Password Generator

HOTP One-Time Password Generator: Computes HMAC-SHA1 across 8-byte big-endian counter value and performs dynamic truncation.

Cryptographic Random Bytes Generator

Cryptographic Random Bytes Generator: Fills Uint8Array buffer with entropy from browser `crypto.getRandomValues()` CSPRNG pool.

SAML Response XML Decoder

Decodes a Base64 or deflated SAML XML string and reports an issuer, character count, and short text preview. It does not extract Subject, Assertion, or Signature blocks.

Diceware Passphrase Generator

Generate 1–20 random words from EFF’s 7,776-word list and inspect the word count and estimated random bits.

HTTP Basic Auth Header Generator

Encodes a JSON username and password as UTF-8 username:password bytes, then Base64 with the Basic prefix. Decoding splits at the first colon and returns username and credentials, where credentials is the complete password including any later colons.

URL Payload Security Inspector

Decodes pasted text up to three rounds and matches traversal, script-like and SQL-like patterns. It does not parse URL components or prove destination safety.

Chinese Idiom Passphrase Generator

Selects 2–8 Chinese idioms from a small built-in list of 10 using browser cryptographic randomness. This is not a broad audited idiom corpus.

Referrer-Policy Header Builder

Referrer-Policy Header Builder: Validates W3C Referrer Policy specification directives and outputs standard HTTP response header.

Permissions-Policy Header Builder

Permissions-Policy Header Builder: Constructs W3C Feature Policy / Permissions Policy header directives restricting browser capabilities.

Cryptographic Hashes & Integrity

SHA Hash Generator

Hashes text or a selected or dropped local file with SHA-1, SHA-256, SHA-384, or SHA-512. Files are processed locally.

MD5 Text Hash Generator

Compute the MD5 digest of entered UTF-8 text as 32 lowercase hexadecimal characters. No binary file input; MD5 is unsuitable for new security uses.

SHA-3 & Keccak Hash Generator

SHA-3 & Keccak Hash Generator: Executes Keccak-256 sponge construction hashing and extracts the first 4 bytes as function selector.

HMAC Keyed-Hash Generator

HMAC Keyed-Hash Generator: Computes keyed-hash message authentication code using Web Crypto SubtleCrypto.sign with HMAC algorithm.

Bcrypt Hash Generator

Generates a fresh salted bcrypt hash with a cost clamped from 4 through 14; this branch has no verifier.

Argon2id Password Hash Generator

Generates Argon2id hashes with bounded memory, iterations, and parallelism.

CRC32 Checksum Calculator

Calculates a CRC32 checksum for entered text. CRC16 is not available in this tool.

Adler-32 Checksum Calculator

Adler-32 Checksum Calculator: Iterates two 16-bit modulo-65521 running sums: A = (1 + Σ D_i) mod 65521, B = (Σ A_i) mod 65521.

BLAKE2b-256 Text Hash

Compute a 32-byte BLAKE2b digest from submitted UTF-8 text.

BLAKE3 Text Hash

Compute a 32-byte BLAKE3 digest from submitted UTF-8 text in JavaScript.

MurmurHash3 Calculator

MurmurHash3 Calculator: Applies 32-bit mixing constants c1=0xcc9e2d51, c2=0x1b873593, bitwise rotations, and avalanching finalizer.

FNV-1a Hash Calculator

Calculates 32-bit and 64-bit FNV-1a hashes of UTF-8 text and returns unsigned decimal and hexadecimal values. Text must be smaller than 5,000,000 UTF-8 bytes.

Bcrypt Work Factor Benchmark

Times one bcrypt hash per selected cost in this browser and reports elapsed milliseconds rounded to two decimals. Results vary with device and load.

Encryption & Ciphers

AES Encryption & Decryption (Web Crypto)

AES Encryption & Decryption (Web Crypto) — PBKDF2-HMAC-SHA256 derives a 32-byte key with 120000 iterations and a 16-byte salt. AES-GCM uses a 12-byte IV and appends its 16-byte authentication tag to the ciphertext before Base64 encoding.

RSA Encryption and Signing Key Pair Generator

Generates separate RSA-OAEP-SHA-256 encryption and RSASSA-PKCS1-v1_5-SHA-256 signing key pairs at 2048, 3072, or 4096 bits. Exports encryption PEM and JWK plus signing JWK; no SSH key is generated.

RSA Encrypt & Decrypt Tool

RSA Encrypt & Decrypt Tool: Imports RSA public key via SubtleCrypto, applies Optimal Asymmetric Encryption Padding (OAEP), and outputs ciphertext.

RSA Signature Generator & Verifier

RSA Signature Generator & Verifier: Computes SHA-256 digest of data, applies RSA private key signing exponent, and verifies signature with public key.

ECDSA P-256 Key Pair Generator

Generates an ECDSA P-256 key pair and exports PEM and JWK forms. It does not generate Ed25519 keys.

XOR Cipher & Bitwise Operator

XOR Cipher & Bitwise Operator: Demonstrates XOR on the first UTF-16 code unit of each input code point using a JSON integer key from 0 to 65535. It does not process bytes or provide secure encryption.

PBKDF2 Key Derivation Explorer

Derives key bytes with browser Web Crypto PBKDF2. SHA-256 and 100,000 iterations are defaults; JSON input can select a supported hash, iteration count and output bit length.

Scrypt Key Derivation Tool

Scrypt Key Derivation Tool: Executes Scrypt memory-hard algorithm (RFC 7914) requiring sequential memory allocation.

Shamir's Secret Sharing (SSS) Simulator

Shamir's Secret Sharing (SSS) Simulator: Constructs a random degree-(k-1) polynomial over Galois Field GF(256) and evaluates points (x, f(x)).

HKDF Key Derivation Tool (RFC 5869)

HKDF Key Derivation Tool (RFC 5869): Computes PRK = HMAC-Hash(salt, IKM) and expands into cryptographically independent subkeys.

ChaCha20-Poly1305 AEAD Tool

ChaCha20-Poly1305 AEAD Tool: Executes 20-round ChaCha stream cipher and computes one-time Poly1305 128-bit authentication tag.

Ed25519 Signature Generator & Verifier

Ed25519 Signature Generator & Verifier: Computes Ed25519 Edwards-curve digital signature (RFC 8032) in browser memory.

Web Crypto API Capabilities Inspector

Checks this browser context and attempts four Web Crypto operations: SHA-256, AES-GCM, HMAC-SHA-256, and ECDSA P-256. Results describe this context only.