Security Tools - Protect Your Data

Memorable Password Generator – Diceware‑Style Passphrases

Generate strong yet memorable passphrases from a large wordlist. Choose the number of words and include a number or symbol for extra security.

Security generator memorable passphrase password

SRI Hash Generator – Generate Integrity Attributes for Scripts

Paste the content of a JavaScript or CSS file and get its SHA‑256, SHA‑384, or SHA‑512 integrity hash. Build the full <script> tag with crossorigin.

Developer Tools generator hash integrity SRI

SPF Record Validator – Syntax Check & Limit Analyzer

Validate the syntax of an SPF record, check for the 10‑lookup limit, and flatten nested includes. Improve email deliverability by fixing SPF errors.

Email authentication email record SPF validator

API Key & Secret Generator – Secure Random Strings

Generate cryptographically secure random strings suitable for API keys, secrets, and tokens. Choose length and character set (hex, base64, alphanumeric).

Developer Tools API key generator random secure

Random RSA/EC Key Pair Demo - Online Cryptographic Visualization

Generate a dummy RSA or EC public/private key pair for educational visualization. Shows key structure and ASN.1 dump. Not for production use.

Education cryptography EC key pair RSA

Frontend JS Library Vulnerability Scanner - Online Check Version

Paste a URL or HTML to detect known vulnerable JavaScript library versions. Quick security audit. Client‑side only.

Developer Tools JavaScript scanner security vulnerability

SSL Certificate & Key Pair Matcher - Online Verify Match

Paste an SSL certificate and private key to verify they belong together. Check if a CSR matches a private key. All local crypto.

Developer Tools certificate key match SSL

PGP Message Viewer - Online Decode & Inspect

Paste an ASCII‑armored PGP message and view its packet structure. See the encrypted/plaintext blocks without decrypting.

Decoder message packet PGP viewer

Trusted Types API Demo - Online Prevent XSS

See how Trusted Types prevents unsafe HTML assignment. Test against injected scripts. Modern security practice.

Developer Tools demo security Trusted Types XSS

Multi‑Format Checksum Generator - Online MD5, SHA, CRC

Paste text or drop a file and get checksums in multiple formats simultaneously. Compare with original. All local.

Developer Tools checksum MD5 multi‑format SHA

Bcrypt Hash Generator - Online Password Hashing Tool

Generate a bcrypt hash from a password with configurable salt rounds. Verify a password against a hash. Entirely client‑side.

Generator bcrypt generator hash password

Image Metadata Remover - Online Clean Privacy Data

Remove all EXIF, IPTC, and XMP metadata from your photos. Strip GPS location. Protect your privacy before upload.

Image Tool EXIF metadata privacy remove

Self‑Signed TLS Certificate Generator - Online Testing

Generate a self‑signed X.509 certificate and private key for local development. All created in your browser. No server involved.

Developer Tools certificate generator self‑signed TLS

PGP Key Pair Generator - Online OpenPGP in Browser

Create a PGP key pair (RSA or ECC) directly in your browser with passphrase protection. Export public/private armored keys. No upload.

Generator generator key OpenPGP PGP

Digital Signature Sign & Verify - Online Web Crypto

Sign a message with a private key and verify the signature with the public key. Learn digital signature flow.

Educational digital signature sign verify Web Crypto

SSL Certificate Checker - Online Verify Expiry & Chain

Enter a domain and see its SSL certificate details: issuer, validity dates, and chain. Client‑side fetch.

Network certificate checker expiry SSL

Platform Authenticator Demo - Online Fingerprint & Face ID

Test your device's built‑in biometric (Touch ID, Face ID, Windows Hello) using the Web Authentication API. Register and verify.

API demo Face ID fingerprint WebAuthn

BLAKE3 Hash Generator - Online Fast Cryptographic Hash

Generate a BLAKE3 hash of any text or file. Extremely fast. Perfect for checksums and content addressing. Local.

Developer Tools BLAKE3 checksum generator hash

Private State Token Demo - Online Anti‑Fraud Test

Issue and redeem Private State Tokens (formerly Trust Tokens). Understand how they help detect bots without cookies.

API anti‑fraud API privacy trust token

WebAuthn Demo - Online Register & Authenticate

Create a passkey and authenticate using the Web Authentication API. Supports platform authenticators (TouchID, FaceID). No server.

API biometric passkey security WebAuthn

Text Encrypt/Decrypt (Web Crypto) - Online AES & RSA

Encrypt and decrypt text using the browser's Web Crypto API. Supports AES‑GCM and subtle key generation. No server required.

Security AES decrypt encrypt Web Crypto

Subresource Integrity (SRI) Hash Generator - Online

Enter a CDN URL for a script or style and generate the integrity attribute with sha384 or sha512. Protect your site.

Developer Tools generate hash integrity SRI

Password Policy Visualizer - Online See Rules in Action

Define password rules and see a live checklist that updates as you type. Design better password UX for your app.

Security password policy rules UX visualizer

XSS Payload Sandbox - Online Test Escape Characters

Paste a potential XSS vector and see if it executes in a sandboxed iframe. For security researchers and education.

Educational payload sandbox security XSS

Reporting API Demo - Online See CSP & Deprecation Reports

Send a test CSP violation report and see the ReportingObserver in action. Understand how monitoring works.

Developer Tools CSP demo monitor Reporting API

CAA Record Generator - Online DNS Certification Authority

Create a CAA DNS record to specify which certificate authorities can issue SSL certs for your domain. Prevent mis‑issuance.

Network CAA certificate DNS SSL

Text to HTML Safe Converter - Online Escape for Web

Convert plain text into HTML‑safe strings by escaping <, >, &, and quotes. Insert into code safely. Local copy.

Developer Tools HTML escape safe text XSS

Encrypted Note Taker - Online Write & Encrypt in Browser

Write notes that are encrypted in your browser before saving to localStorage. Only accessible with your passphrase.

Productivity AES encrypted notes secure

Hash Type Identifier - Online Guess MD5, SHA, Bcrypt

Paste a hash and the tool guesses which algorithm created it based on length and format. Useful for forensic analysis.

Forensics detect forensics hash identifier

JPEG EXIF Remover - Online Strip Metadata for Privacy

Remove all EXIF data (GPS, camera info) from a JPEG before uploading. Processed locally. Protect your privacy.

Image Tool EXIF JPEG privacy remover

Content Security Policy Evaluator - Online Hash & Nonce Check

Test if a script or style will be allowed by a given CSP. Compute hash/nonce. Strengthen your site’s defense against XSS. Local.

Evaluator CSP evaluator security XSS

DMARC Record Generator - Online Email Policy Builder

Create a DMARC policy record with percentage, reporting addresses, and alignment mode. Validate and copy the final DNS TXT.

Network DMARC DNS email policy

DKIM Record Generator - Online Public Key DNS Entry

Generate a DKIM DNS record from a public key and selector. Check syntax. Improve your domain’s email deliverability.

Network authentication DKIM DNS email

URL Safety Checker – Scan for Malware & Phishing Threats

Enter a suspicious link and this tool performs a client‑side check against public threat intelligence feeds. See risk category before you click.

Security checker malware safety URL

SHA‑1, SHA‑256, SHA‑512 Hash Generator - Online

Generate SHA‑1, SHA‑256, SHA‑512, and SHA‑3 digests of any text or file. Verify integrity. All in your browser.

Developer Tools checksum generator hash SHA‑256

Email Header Analyzer - Online SPF, DKIM, DMARC Check

Paste raw email headers and see authentication results (SPF, DKIM, DMARC) in a readable table. Find spoofing attempts.

Network authentication email headers SPF

JWT Viewer & Verifier - Online Decode & Check Signature

Paste a JSON Web Token and decode its header and payload. Verify signature if you provide the secret. Fully local.

Developer Tools decode JWT token verify

Cookie Consent Banner Generator - Online GDPR/CCPA HTML & CSS

Create a custom cookie consent banner with text, button styles, and colors. Copy the ready‑to‑use HTML/CSS/JS snippet.

Developer Tools CCPA cookie consent GDPR generator

JWT Signature Verifier - Online HMAC/RSA/EC Check

Paste a JWT and a public key or secret to verify the signature. Supports HS256, RS256, ES256. All operations local.

Security HS256 JWT signature verify

WebAuthn Response Decoder - Online Unpack Attestation

Paste a raw WebAuthn attestation response (CBOR) and decode its fields: format, authenticator data, and extensions. Debug passkeys locally.

Debugging attestation decoder passkey WebAuthn

Permissions‑Policy Header Generator - Online Security Config

Configure browser feature permissions (camera, microphone, geolocation) and generate the Permissions‑Policy HTTP header.

Generator generator header Permissions‑Policy security

PBKDF2 Key Derivation Demo - Online Password‑Based Key

Derive a strong cryptographic key from a password using PBKDF2 with SHA‑256. Adjust iterations and salt. Educational and test tool.

Educational crypto key derivation password PBKDF2

Argon2 Hash Generator - Online Modern Password KDF

Generate Argon2id hashes in the browser using a WASM compilation. Choose memory, iterations, and parallelism. Secure local hashing.

Generator Argon2 hash KDF password

Local Password Breach Checker - Online k‑Anonymity

Tell if your password has appeared in data breaches without sending the full password. Uses hash prefix locally.

Security breach checker password safe

SQL Injection Simulator - Online Educational Sandbox

Test SQL injection inputs on a mock database and see the resulting query. Learn how to prevent SQLi. No real data.

Educational learn security simulator SQL injection

Security Headers Auditor - Online Check HSTS, CSP & More

Enter a website and check which security headers (HSTS, CSP, X‑Frame‑Options) are present. Get a security grade.

Network audit CSP HSTS security headers

X‑Frame‑Options Tester - Online Clickjacking Defense

Check if a URL can be embedded in an iframe. Test your site’s defense against clickjacking. Browser‑based.

Security clickjacking security test X‑Frame‑Options

SHA‑3 / SHAKE Hash Generator - Online Extendable Output

Generate SHA‑3 and SHAKE hashes of any text with configurable output length. All local using js library.

Developer Tools generator hash SHA‑3 SHAKE

HTML Sanitizer API Demo - Online Safe Set HTML

Use the new Sanitizer API to safely insert raw HTML into the DOM. Blocks malicious tags. Experimental demo.

Developer Tools HTML safe Sanitizer API XSS

SSL Certificate Decoder - Online X.509 Viewer

Paste a PEM/DER certificate and decode all fields: issuer, subject, validity, SANs, and fingerprint. Pure JavaScript parser.

Developer Tools certificate decoder SSL X.509

CSP Analyzer - Online Test & Improve Policy

Paste a Content‑Security‑Policy header and get a human‑readable breakdown. See potential risks and suggestions.

Analyzer analyzer CSP header security

Bcrypt Hash Generator & Verifier - Online Password Hashing

Hash passwords using the bcrypt algorithm with configurable cost factor. Also verify a password against a stored hash. All local.

Generator bcrypt hash password verify

Certificate Signing Request (CSR) Generator - Online

Generate a CSR and private key pair in the browser using the Web Crypto API. Download both as files. No data sent to server.

Developer Tools certificate CSR generator SSL

Brute Force Time Estimator - Online Password Cracking Simulation

Enter a password and see the estimated time it would take to crack using brute force at different speeds. Educational.

Educational brute force crack password simulator

Web Crypto Key Generator - Online Generate RSA/EC Keys

Generate cryptographic key pairs using the Web Crypto API. Export as JWK or raw. No server needed; pure security.

Generator generator key RSA Web Crypto

AES Text Encrypt/Decrypt - Online Secure Message Tool

Encrypt and decrypt text using AES in the browser with a password. Uses Web Crypto API. No data sent to server.

Security AES decrypt encrypt secure

HMAC Generator - Online SHA‑256/512 Message Authentication

Create an HMAC (Hash‑based Message Authentication Code) using SHA‑256 or SHA‑512 with a secret key. Verify data integrity. Local.

Generator authentication generator HMAC SHA‑256

BIP39 Mnemonic Generator - Online 12/24 Words

Generate cryptographically secure BIP39 mnemonic phrases (12 or 24 words) for HD wallet seeds. All entropy generated locally.

Generator BIP39 mnemonic seed wallet

Password Policy Checker - Online Test Against Rules

Define minimum length, uppercase, digits, special chars, and check if a password meets your custom policy. Instant feedback.

Security checker compliance password policy rules

Cross‑Origin Isolation Checker - Online COOP/COEP Test

Check if your site is cross‑origin isolated by examining the COOP and COEP headers. See if SharedArrayBuffer is available.

Diagnostic COEP COOP cross‑origin isolation