Skip to content

Security, auth and secrets

Decode and sign JWTs, hash and HMAC, generate passwords and API keys, and check key formats without sending them anywhere. Build CSP headers, scan .env files and browser extensions for risk, and catch homoglyph tricks hidden in text.

17 tools, free, in your browser

JWT Decoder & Inspector

Decode JSON Web Tokens to inspect the header, algorithm, standard and custom claims, readable timestamps and expiration status.

Developer utilities

JWT Generator

Build and sign a JSON Web Token with HS256, HS384 or HS512 from an editable header and claims, with an exp shortcut and an expiry readout.

Developer utilities

Hash Generator

Generate MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes for text or files

Developer utilities

HMAC Generator

Compute an HMAC with SHA-1, SHA-256, SHA-384 or SHA-512 in hex or base64, and reproduce GitHub, Stripe and Slack webhook signature headers.

Developer utilities

Bcrypt Generator & Verifier

Generate bcrypt password hashes with an adjustable cost factor and verify a password against an existing hash, using the bcryptjs library.

Developer utilities

Password Generator

Generate strong, cryptographically secure passwords with customizable length, character sets, and entropy meter

Generators

Diceware Passphrase Generator

Generate diceware passphrases from an embedded 1,296-word list with crypto.getRandomValues, choosing word count, separator and capitalization.

Generators

API Key Generator

Generate random test API keys in generic, OpenAI-style, Anthropic-style or GitHub-style formats with a custom prefix and length.

Developer utilities

AI API Key Tester

Identify an AI API key's provider from its prefix (Anthropic, OpenAI, OpenRouter, Groq, Google AI, xAI and more) and check its format locally.

AI tools

Basic Auth Encoder / Decoder

Encode a username and password into an HTTP Basic Authorization header or curl -H flag, or decode a Basic token back to plaintext credentials.

Developer utilities

CSP & SRI Policy Builder

Build strict CSP header templates and SRI tag snippets for frontend script hardening and safer deployments

Developer utilities

.env Security Scanner

Scan a .env file for exposed API keys, high-entropy secrets and insecure defaults, with key patterns for OpenAI, Anthropic, AWS, Stripe and GitHub.

Developer utilities

Extension Guard

Scan Chrome extension permissions for security risks with risk scoring, dangerous combination detection, and plain-English explanations

Developer utilities

Homoglyph & Invisible Character Detector

Detect zero-width characters, bidi overrides, non-ASCII spaces and Cyrillic or Greek look-alike letters in text or code, and copy a sanitized version.

Developer utilities

SSL Certificate Checker

Parse openssl x509 -text output for issuer, subject, SANs and validity dates, with warnings for expired certificates or ones expiring within 30 days.

Developer utilities

AWS IAM Policy Analyzer

Analyze an AWS IAM policy for wildcard actions and resources, privilege-escalation paths, public principals and missing conditions, with a risk score.

Developer utilities

License Compatibility Checker

Check whether open source licenses such as MIT, Apache-2.0, GPL, LGPL, MPL and AGPL can be combined, with per-pair verdicts and an outbound license.

Developer utilities

More collections