Security Tools
Security-minded utilities: JWT decoder, hash and HMAC generators, bcrypt, CSP builder and SRI checksum tools.
JWT Decoder
Decode and inspect JWT tokens online for free. View header, payload and claims with readable dates, check expiry, verify HMAC signatures — locally in your browser.
JWT Encoder
Create and sign JWT tokens online for free. HS256/384/512 HMAC signing via Web Crypto — the counterpart to our JWT decoder, fully local.
HMAC Generator
Compute HMAC-SHA256/384/512 online for free. Keyed message authentication codes via Web Crypto — the secret never leaves your browser.
Bcrypt Hash Generator
Generate and verify bcrypt password hashes online for free. Adjustable cost factor (4–15 rounds) — computed locally with bcryptjs.
htpasswd Generator
Generate .htpasswd entries online — create bcrypt password lines for Apache and nginx basic auth with adjustable cost. Runs locally.
Password Strength Checker
Check password strength online — zxcvbn-based scoring with crack-time estimates for online and offline attacks, plus improvement tips. Fully local.
TOTP Generator
Generate TOTP codes online — paste a base32 secret or otpauth:// URI and get live 6-digit two-factor codes with countdown. Fully client-side.
SRI Hash Generator
Generate Subresource Integrity hashes online — SHA-256/384/512 integrity attributes for scripts and stylesheets, computed locally.
CSP Generator
Build a Content-Security-Policy header online — pick directives and sources, get the policy string and meta tag variant instantly.