Security
Identity, credentials, and integrity in one place: decode and verify JWTs, generate passwords and RSA keys, compute hashes and HMACs, decode certificates and check live SSL, produce htpasswd entries, work out chmod bits, and encrypt files.
10 tools
Security
-
JWT Inspector
Decode a JSON Web Token in the browser to read its header, payload, and claims, then verify or re-sign it with HMAC, RSA, ECDSA, or EdDSA keys.
Open tool -
Password Generator
Generate random passwords, memorable passphrases, and PINs locally with length, character groups, custom symbol sets, similar-character filtering, and strength scoring.
Open tool -
Hash Generator
Generate text and file hash digests with SHA-256, SHA-512, SHA3, BLAKE3, MD5, CRC, and xxHash for integrity checks, release verification, and data fingerprints.
Open tool -
HMAC Generator
Create HMAC-SHA256, HMAC-SHA512, and other keyed message authentication codes for API authentication, webhook verification, tamper checks, and file signature comparison.
Open tool -
RSA Key Generator
Generate RSA public and private key pairs in the browser for encryption and digital signatures, with selectable key size, hash, RSA-OAEP / RSA-PSS / PKCS#1 usage, and PEM, PKCS#1, JWK, and OpenSSH output.
Open tool -
Certificate Decoder
Decode X.509 certificates, certificate chains, and CSRs in the browser to read subject, issuer, validity, SANs, key usage, key size, and SHA-256 fingerprints.
Open tool -
SSL Checker
Run a live TLS handshake against any domain to see certificate expiry, chain trust, hostname match, SANs, and the TLS versions the server accepts.
Open tool -
File Encryption
Encrypt and decrypt any file locally with a password using AES-256-GCM, PBKDF2 key derivation, built-in integrity verification, password strength feedback, and chunked progress for archival, transfer, and cloud upload protection.
Open tool -
htpasswd Generator
Generate Apache and nginx .htpasswd credentials with bcrypt, Apache MD5, SHA-512 and more, plus a verify mode — all computed locally in your browser.
Open tool -
Chmod Calculator
Compute Unix file permissions with a visual rwx matrix and read the octal, symbolic, and chmod command at once. Handles setuid, setgid, and the sticky bit, applies symbolic operations like u+x or go-w, resolves umask values, and flags risky settings.
Open tool
About this category
Authentication and integrity checks live on the surface of almost every backend integration. When a request 401s, when a webhook signature fails to verify, when a download checksum doesn't match, when the browser complains about a certificate — the answer is usually one of the same handful of primitives: a JWT, a hash digest, an HMAC signature, a certificate, or a generated secret.
These tools give you a quick way to inspect those primitives without writing a script — and apart from the SSL check, which has to open a real TLS connection, the maths happens in your browser. Decode a token in seconds, generate a fresh password, hash a value with the algorithm the docs asked for, or recompute an HMAC to compare against the one in the header.
What you can do here
-
JWT decoding and signature verification
Decode header and payload, surface the algorithm, check expiry, and verify the signature with a secret or public key when you are chasing a 401 or a privilege bug.
-
Hashes, HMACs, and file checksums
Digest text or files with SHA-256, SHA-1, MD5, and more, build HMAC-SHA256/512 from a text or hex key, and check webhook signatures and download checksums.
-
Certificate and TLS inspection
Break a PEM certificate into readable fields, or type a domain to see the certificate it actually serves: days to expiry, whether the chain is complete, and which hostnames the SAN covers.
-
Credential generation and permissions
Generate strong random passwords and RSA key pairs, produce htpasswd entries for Apache and nginx, line up octal and rwx in the chmod calculator, and encrypt files.