Skip to content

Security Tools

Generate passwords, hash data, encrypt text, validate tokens, and test security configurations.

Converters & Encoding 6

Base64 Encode / Decode

Encode and decode Base64 strings with proper UTF-8 support and auto-detection

Hash Generator

Generate MD5, SHA-1, SHA-256, and SHA-512 hashes from text or files

Hash Identifier

Identify hash types by analyzing length, character set, and format patterns

HMAC Generator

Generate HMAC authentication codes using SHA-256, SHA-384, or SHA-512

JWT Decoder

Decode and inspect JWT tokens with security warnings for expired or unsigned tokens

Password Hasher (PBKDF2)

Hash passwords securely using PBKDF2-SHA256 with configurable iterations and random salt

Generators 3

Passphrase Generator

Generate memorable, secure passphrases from random words with configurable options

Random Token Generator

Generate cryptographically secure random tokens and API keys in various formats

UUID Generator

Generate and validate UUID v4 and v7 identifiers with formatting options and bulk generation

Encryption 2

AES Encrypt / Decrypt

hot

Encrypt and decrypt text using AES-256-GCM with password-based key derivation

RSA Key Generator

Generate RSA public/private key pairs in PEM format using Web Crypto API

Cipher 2

Caesar Cipher

Encrypt and decrypt text with the Caesar cipher, including brute force mode for all 25 shifts

ROT13 Encoder / Decoder

Encode and decode text using the ROT13 substitution cipher

Headers 2

CORS Generator

Build CORS header configurations for Express, Nginx, and Apache with an interactive builder

CSP Generator

Build Content Security Policy headers with an interactive directive builder

Analysis 2

Email Header Analyzer

Parse and analyze raw email headers to trace delivery path, authentication results, and metadata

Password Strength Meter

Check how strong your password is with detailed analysis and estimated crack time

Other 4

Password Generator

★

Generate strong, secure random passwords with customizable length and character sets

Diceware Passphrase Generator

new

Generate strong memorable passphrases from a curated word list, adjustable count, separator, capitalization, optional number suffix.

Credit Card Validator

Validate credit card number format using the Luhn algorithm and detect card type

TOTP Generator

Generate time-based one-time passwords (TOTP) with countdown timer and OTPAuth URI

What Do the Security Tools Cover?

The cryptographic utilities developers reach for while building auth systems and securing applications. Password generators where you control length, character mix, and exclusion rules. Hash generators that support MD5, SHA-1, SHA-256, SHA-512, and the rest of the SHA family. A bcrypt generator for hashing passwords the right way. AES-256 encryption and decryption for locking down sensitive text. A JWT decoder that breaks tokens apart and shows you the header, payload, and signature without leaving your browser. TOTP code generators for testing 2FA flows. There's also a CSP Generator for building Content-Security-Policy headers, a Credit Card Validator for checking Luhn algorithm compliance, and an Email Header Analyzer for diagnosing mail delivery issues.

Why You'd Use These Instead of Some Random Site

The whole point of security tools is that you're dealing with sensitive material, passwords, tokens, hashes, encrypted payloads. Sending that stuff to an unknown third-party server kind of defeats the purpose. Every Toolsvu security tool that touches sensitive input runs entirely in your browser using JavaScript and the Web Crypto API. Your passwords never leave your machine. Your JWT payloads stay local. The bcrypt hashes get computed right on your device. Nothing goes over the wire. That matters when you're debugging production auth tokens or generating credentials you'll actually use.

Security Tools Developers Grab Most Often

  • Password Generator, Spit out strong random passwords with fine-grained control over length, uppercase, lowercase, numbers, symbols, and characters to exclude.
  • Hash Generator, Type or paste any text and get its MD5, SHA-1, SHA-256, SHA-512, and other hash digests all at once. Useful for checksum verification and quick comparisons.
  • JWT Decoder, Paste a JWT and instantly see the decoded header and payload as formatted JSON, plus signature info. Beats squinting at Base64 in your terminal.
  • UUID Generator, Mint fresh v4 UUIDs for primary keys, session tokens, correlation IDs, or anywhere you need guaranteed uniqueness.
  • AES Encrypt / Decrypt, Lock text with AES-256 using a passphrase, or unlock an existing ciphertext. The entire operation happens client-side, nothing leaves your browser.
Back to all tools