Cryptography
Asymmetric cryptography
Generate or use key pairs to encrypt messages with a public key and decrypt them with a private key, ideal for reviewing secure exchange flows and integration tests.
Bcrypt Hash Generator and Checker
Generate $2b$, $2y$ or $2a$ bcrypt hashes with the cost of your choice, measure how long each one takes and verify passwords against hashes from PHP, Laravel, Spring or Node.js. The result breaks down the version, cost, salt and checksum, and warns you if the password exceeds 72 bytes.
Hash functions
Calculate hashes for text or files to compare integrity, reproduce signatures, validate checksums and review results with common algorithms such as SHA, MD5 or BLAKE2.
JSON Web Tokens (JWT)
Paste a JWT token to inspect its header and payload, review claims, verify the signature when you have the key and detect common authentication issues.
Share secrets
Create temporary links to share text or small files with encryption, password, expiration and read limits when you need to send sensitive data.
SSL Certificate Analyzer
Review TLS certificates for domains or IPs to see issuer, validity dates, alternative names, algorithms and trust chain data.
Strong password and passphrase generator
Generate random passwords with the length and characters you need, passphrases from the EFF word list, or numeric PINs. Each result shows its bits of entropy and how long a brute-force attack would take, and you can check your own password without it leaving your browser.
Symmetric cryptography
Protect messages or text snippets with a shared key, choose the algorithm and get encrypted or decrypted output for testing, secure exchange or technical validation.
TOTP and 2FA Code Generator and Verifier
Generate a secret and QR code for Google Authenticator or Microsoft Authenticator, see the current TOTP or HOTP code with its countdown, read an existing otpauth:// URI and verify codes with the same clock tolerance as a server.
UUID and ULID generator and decoder
Generate UUIDs of versions 1, 3, 4, 5, 6 and 7 or ULIDs, one at a time or a thousand at once, with or without hyphens, uppercase or in braces. Paste any identifier to find out its version, its variant, when it was created and how it is written as a GUID, URN, integer or Base64.
WordPress
Generate WordPress-compatible hashes or verify passwords against existing hashes for audits, controlled migrations and user database reviews.
X.509 Certificate, CSR and PEM Decoder
Paste a certificate, CSR, key or .pfx to see the subject, SANs, validity, extensions and fingerprints, sort and verify the chain, check which private key matches each certificate, convert formats and generate a new CSR, all in your browser.
About this category
The cryptography tools cover the tasks that come up when working on application security: encrypting text with AES or ChaCha20 using a shared key, testing an RSA key pair, computing a file's hash to check its integrity, or inspecting the claims of a JWT when authentication fails.
There are also generators for everyday needs: passwords and passphrases with their entropy, UUIDs and ULIDs, TOTP secrets for two-factor authentication and WordPress-compatible hashes. The certificate decoder and the SSL certificate checker help diagnose incomplete chains or expirations. Except for checking a domain's certificate, which is queried from our server, and shared secrets, which are stored encrypted, everything is processed in your browser.