Security Tools
Hash generators, encryption, password tools and security utilities.
59 tools available
Popular
New
MD5 Hash Generator
Generate MD5 hash from any text or string instantly online — free.
SHA-256 Hash Generator
Generate SHA-256 hash from any text instantly online — fast and free.
Password Strength Checker
Check how strong your password is — free instant online tool.
Text Encrypt & Decrypt
Encrypt and decrypt text with AES-256 online — free and secure.
Random Token Generator
Generate secure random tokens, API keys and secrets online — free.
Bcrypt Hash Generator
Generate and verify bcrypt password hashes online — free instant tool.
JWT Decoder
Decode and inspect JWT tokens online — free instant JWT debugger.
Credit Card Validator
Validate credit card numbers using Luhn algorithm — free educational tool.
Luhn Algorithm Tool
Validate card numbers using the Luhn algorithm and compute check digits — for development and education.
CSR Generator
Generate a Certificate Signing Request (CSR) online — free SSL tool.
SHA-1 Hash Generator
Generate SHA-1 hashes from any text. Fast, free, and 100% browser-based.
SHA-512 Hash Generator
Generate SHA-512 hashes from any text. Maximum-strength cryptographic hashing.
HMAC Generator
Generate HMAC authentication codes using SHA-256, SHA-384, or SHA-512.
File Hash Generator
Calculate MD5, SHA-1, SHA-256, or SHA-512 hash of any file in your browser.
Hash Compare Tool
Compare two hash values to verify file integrity or password matches.
Advanced Password Generator
Generate ultra-secure passwords with advanced options: length, symbols, no ambiguous chars.
Passphrase Generator
Generate memorable yet secure passphrases with random words. Great for master passwords.
Password Entropy Calculator
Calculate password entropy in bits and estimate crack time for any password.
Password Leak Checker
Check if your password appears in known data breaches using the HIBP k-anonymity model.
Base64 Advanced Tool
Encode and decode Base64 with URL-safe variant and file support.
Hex Converter
Convert text to hexadecimal, hex to text, and between hex, binary, and decimal.
Binary Converter
Convert text to binary (ASCII) and binary back to text. Supports space-delimited output.
Unicode Converter
Convert text to Unicode code points, HTML entities, and escape sequences.
URL Encoder / Decoder
Encode and decode URL percent-encoded strings. Supports full URLs and components.
HTML Encode / Decode
Convert special characters to HTML entities and decode HTML entities back to text.
AES Encrypt / Decrypt
Encrypt and decrypt text using AES-256-GCM with PBKDF2 key derivation.
Caesar Cipher
Encrypt and decrypt text using the Caesar cipher with any shift value (1–25).
Vigenere Cipher
Encrypt and decrypt text using the polyalphabetic Vigenere cipher.
JWT Encoder
Create and sign JWT tokens with custom header, payload, and HMAC-SHA256 secret.
JWT Validator
Validate JWT structure, verify HMAC signature, and check expiry claims.
API Key Generator
Generate cryptographically secure API keys in hex, Base64, or UUID format.
Secure Token Generator
Generate CSRF tokens, session IDs, and nonces using cryptographic randomness.
OAuth Token Viewer
Decode and inspect OAuth 2.0 access tokens and Bearer tokens.
Password List Generator
Generate multiple unique passwords for batch account creation or testing.
JWT Debugger
Full JWT debug tool: decode, inspect, verify, and analyze JWT token security.
Cookie Parser
Parse and analyze HTTP Cookie header strings. Inspect security attributes.
Email Validator
Validate email address format and check domain MX record structure.
Phone Number Validator
Validate international phone numbers with country code detection.
IBAN Validator
Validate IBAN numbers using the official MOD-97 algorithm. Detects country and bank.
ZIP Code Validator
Validate ZIP codes and postal codes for US, UK, Canada, and 50+ countries.
User Agent Parser
Parse any user agent string to detect browser, OS, device, and bot status.
User Agent Generator
Generate realistic user agent strings for any browser, OS, and device combination.
IP Range Calculator
Calculate IP range, subnet mask, and network info from CIDR notation.
Port Reference Tool
Look up well-known port numbers and their associated services and protocols.
Security Headers Checker
Analyze HTTP security headers and score any website's security posture.
CSP Analyzer
Parse and analyze Content Security Policy headers. Detect unsafe directives.
XSS Pattern Checker
Detect common XSS payloads and patterns in text for educational security testing.
SQL Injection Pattern Checker
Detect common SQL injection patterns for defensive security testing.
EXIF Metadata Viewer
View EXIF metadata from JPEG photos including GPS location, camera, and date.
File Integrity Checker
Compute SHA-256 hash of any file and verify against an expected hash value.
Checksum Validator
Compute and compare MD5, SHA-1, SHA-256, and SHA-512 checksums for text or files.
CORS Tester
Test and understand CORS configuration by analyzing CORS headers and policies.
HTTP Header Inspector
Analyze HTTP response headers for security, information disclosure, and best practices.
SSL/TLS Reference Guide
Reference guide for SSL/TLS protocols, cipher suites, and certificate best practices.
Reverse DNS Lookup
Perform reverse DNS (PTR record) lookups to find hostnames from IP addresses.
Whois Lookup
Look up domain registration details, registrar, creation date, and name servers.
2FA TOTP Generator
Generate TOTP two-factor authentication codes from any Base32 secret key.
PBKDF2 Key Derivation
Derive encryption keys from passwords using PBKDF2 with SHA-256.
Privacy Policy Analyzer
Analyze privacy policy text for key data collection, sharing, and retention clauses.
About Our Security Tools
Our Security Tools provide developers, security researchers, and privacy-conscious users with a comprehensive set of cryptographic and security utilities. Generate MD5, SHA-1, SHA-256, SHA-512 hashes, encode and decode with Base64 and Hex, encrypt and decrypt text using AES, generate bcrypt hashes, decode and verify JWT tokens, check password strength, generate secure random tokens, validate email addresses and credit card numbers, inspect SSL certificates, test CORS configurations, and much more. All tools run in your browser with no server-side processing — your sensitive data never leaves your device.