UD5 Toolkit
SSL Certificate & Key Pair Matcher - Online Verify Match
Paste an SSL certificate and private key to verify they belong together. Check if a CSR matches a private key. All local crypto.
Security Tools - Protect Your Data
99+ toolsPGP Message Viewer - Online Decode & Inspect
Paste an ASCII‑armored PGP message and view its packet structure. See the encrypted/plaintext blocks without decrypting.
Image Metadata Remover - Online Clean Privacy Data
Remove all EXIF, IPTC, and XMP metadata from your photos. Strip GPS location. Protect your privacy before upload.
Bcrypt Hash Generator - Online Password Hashing Tool
Generate a bcrypt hash from a password with configurable salt rounds. Verify a password against a hash. Entirely client‑side.
SSL Cipher Suite Checker - Online Test TLS Security
Check which cipher suites a website supports and identify weak or outdated ones. Quick security audit from your browser.
PBKDF2 Key Derivation Demo - Online Password‑Based Key
Derive a strong cryptographic key from a password using PBKDF2 with SHA‑256. Adjust iterations and salt. Educational and test tool.
Platform Authenticator Demo - Online Fingerprint & Face ID
Test your device's built‑in biometric (Touch ID, Face ID, Windows Hello) using the Web Authentication API. Register and verify.
Password Policy Visualizer - Online See Rules in Action
Define password rules and see a live checklist that updates as you type. Design better password UX for your app.
Zero‑Width Character Detector - Online Find Hidden Unicode
Paste text and instantly see if it contains hidden zero‑width characters often used in steganography. Reveal invisible payloads.
Reporting API Demo - Online See CSP & Deprecation Reports
Send a test CSP violation report and see the ReportingObserver in action. Understand how monitoring works.
Multi‑Format Checksum Generator - Online MD5, SHA, CRC
Paste text or drop a file and get checksums in multiple formats simultaneously. Compare with original. All local.
Trusted Types API Demo - Online Prevent XSS
See how Trusted Types prevents unsafe HTML assignment. Test against injected scripts. Modern security practice.
Random RSA/EC Key Pair Demo - Online Cryptographic Visualization
Generate a dummy RSA or EC public/private key pair for educational visualization. Shows key structure and ASN.1 dump. Not for production use.
Frontend JS Library Vulnerability Scanner - Online Check Version
Paste a URL or HTML to detect known vulnerable JavaScript library versions. Quick security audit. Client‑side only.
PDF Script Inspector - Online See Embedded JavaScript
Drop a PDF and extract any embedded JavaScript or form actions. Check for malicious code. Privacy‑friendly analysis.
Hash Type Identifier - Online Guess MD5, SHA, Bcrypt
Paste a hash and the tool guesses which algorithm created it based on length and format. Useful for forensic analysis.
SHA‑1, SHA‑256, SHA‑512 Hash Generator - Online
Generate SHA‑1, SHA‑256, SHA‑512, and SHA‑3 digests of any text or file. Verify integrity. All in your browser.
WebAuthn Demo - Online Register & Authenticate
Create a passkey and authenticate using the Web Authentication API. Supports platform authenticators (TouchID, FaceID). No server.
BLAKE3 Hash Generator - Online Fast Cryptographic Hash
Generate a BLAKE3 hash of any text or file. Extremely fast. Perfect for checksums and content addressing. Local.
Digital Signature Sign & Verify - Online Web Crypto
Sign a message with a private key and verify the signature with the public key. Learn digital signature flow.
SSL Certificate Decoder - Online X.509 Viewer
Paste a PEM/DER certificate and decode all fields: issuer, subject, validity, SANs, and fingerprint. Pure JavaScript parser.
Email Header Analyzer - Online SPF, DKIM, DMARC Check
Paste raw email headers and see authentication results (SPF, DKIM, DMARC) in a readable table. Find spoofing attempts.
Private State Token Demo - Online Anti‑Fraud Test
Issue and redeem Private State Tokens (formerly Trust Tokens). Understand how they help detect bots without cookies.
Self‑Signed TLS Certificate Generator - Online Testing
Generate a self‑signed X.509 certificate and private key for local development. All created in your browser. No server involved.
SQL Injection Simulator - Online Educational Sandbox
Test SQL injection inputs on a mock database and see the resulting query. Learn how to prevent SQLi. No real data.
XSS Payload Sandbox - Online Test Escape Characters
Paste a potential XSS vector and see if it executes in a sandboxed iframe. For security researchers and education.
SHA‑3 / SHAKE Hash Generator - Online Extendable Output
Generate SHA‑3 and SHAKE hashes of any text with configurable output length. All local using js library.
HTML Sanitizer API Demo - Online Safe Set HTML
Use the new Sanitizer API to safely insert raw HTML into the DOM. Blocks malicious tags. Experimental demo.
JPEG EXIF Remover - Online Strip Metadata for Privacy
Remove all EXIF data (GPS, camera info) from a JPEG before uploading. Processed locally. Protect your privacy.
SSL Certificate Checker - Online Verify Expiry & Chain
Enter a domain and see its SSL certificate details: issuer, validity dates, and chain. Client‑side fetch.
AES Text Encrypt/Decrypt - Online Secure Message Tool
Encrypt and decrypt text using AES in the browser with a password. Uses Web Crypto API. No data sent to server.
Content Security Policy Evaluator - Online Hash & Nonce Check
Test if a script or style will be allowed by a given CSP. Compute hash/nonce. Strengthen your site’s defense against XSS. Local.
CAA Record Generator - Online DNS Certification Authority
Create a CAA DNS record to specify which certificate authorities can issue SSL certs for your domain. Prevent mis‑issuance.
Argon2 Hash Generator - Online Modern Password KDF
Generate Argon2id hashes in the browser using a WASM compilation. Choose memory, iterations, and parallelism. Secure local hashing.
Subresource Integrity (SRI) Hash Generator - Online
Enter a CDN URL for a script or style and generate the integrity attribute with sha384 or sha512. Protect your site.
Encrypted Note Taker - Online Write & Encrypt in Browser
Write notes that are encrypted in your browser before saving to localStorage. Only accessible with your passphrase.
Permissions‑Policy Header Parser - Online Decode & Check
Paste the Permissions‑Policy header and get a human‑readable table of allowed/blocked browser features. Understand how your site is restricted.
WebAuthn Response Decoder - Online Unpack Attestation
Paste a raw WebAuthn attestation response (CBOR) and decode its fields: format, authenticator data, and extensions. Debug passkeys locally.
Bcrypt Hash Generator & Verifier - Online Password Hashing
Hash passwords using the bcrypt algorithm with configurable cost factor. Also verify a password against a stored hash. All local.
Text Encrypt/Decrypt (Web Crypto) - Online AES & RSA
Encrypt and decrypt text using the browser's Web Crypto API. Supports AES‑GCM and subtle key generation. No server required.
Brute Force Time Estimator - Online Password Cracking Simulation
Enter a password and see the estimated time it would take to crack using brute force at different speeds. Educational.
Permissions‑Policy Header Generator - Online Security Config
Configure browser feature permissions (camera, microphone, geolocation) and generate the Permissions‑Policy HTTP header.
HMAC Generator - Online SHA‑256/512 Message Authentication
Create an HMAC (Hash‑based Message Authentication Code) using SHA‑256 or SHA‑512 with a secret key. Verify data integrity. Local.
PGP Key Pair Generator - Online OpenPGP in Browser
Create a PGP key pair (RSA or ECC) directly in your browser with passphrase protection. Export public/private armored keys. No upload.
DMARC Record Generator - Online Email Policy Builder
Create a DMARC policy record with percentage, reporting addresses, and alignment mode. Validate and copy the final DNS TXT.
JWT Viewer & Verifier - Online Decode & Check Signature
Paste a JSON Web Token and decode its header and payload. Verify signature if you provide the secret. Fully local.
Text to HTML Safe Converter - Online Escape for Web
Convert plain text into HTML‑safe strings by escaping <, >, &, and quotes. Insert into code safely. Local copy.
Regex Injection / ReDoS Tester - Online Safe Pattern Test
Test a regular expression against malicious inputs to detect catastrophic backtracking and ReDoS vulnerabilities. Educational.
Random Crypto Key Generator - Online Create API Tokens & Secrets
Generate strong random strings for API tokens, session secrets, or encryption keys. Uses crypto.getRandomValues().
Security Headers Auditor - Online Check HSTS, CSP & More
Enter a website and check which security headers (HSTS, CSP, X‑Frame‑Options) are present. Get a security grade.
JWT Signature Verifier - Online HMAC/RSA/EC Check
Paste a JWT and a public key or secret to verify the signature. Supports HS256, RS256, ES256. All operations local.
DNSSEC Chain Validator - Online Check RRSIG & DS
Validate a DNSSEC chain by entering DS and RRSIG records. Verify that signatures match. Educational. Local algorithm.
HSTS Header Checker - Online Strict‑Transport‑Security
Fetch a site’s HSTS header and validate its syntax, max‑age, and subdomain flags. Ensure your site enforce HTTPS.
CSP Analyzer - Online Test & Improve Policy
Paste a Content‑Security‑Policy header and get a human‑readable breakdown. See potential risks and suggestions.
X‑Frame‑Options Tester - Online Clickjacking Defense
Check if a URL can be embedded in an iframe. Test your site’s defense against clickjacking. Browser‑based.
DKIM Record Generator - Online Public Key DNS Entry
Generate a DKIM DNS record from a public key and selector. Check syntax. Improve your domain’s email deliverability.
BIP39 Mnemonic Generator - Online 12/24 Words
Generate cryptographically secure BIP39 mnemonic phrases (12 or 24 words) for HD wallet seeds. All entropy generated locally.
Local Password Breach Checker - Online k‑Anonymity
Tell if your password has appeared in data breaches without sending the full password. Uses hash prefix locally.
Memorable Passphrase Generator - Online XKCD Style
Create a strong yet easy‑to‑remember passphrase from random common words. Combines 4‑6 words. Fully offline. XKCD compliant.
Steganography Text Hider - Online Conceal Secret Message
Hide a secret message inside a normal text using zero-width characters or invisible ink. Copy the result. Decode with the same tool.