Security

Generate random passwords, PINs or word-based passphrases in your browser. Set length and character rules, then copy or download your results.

Generate text digests with MD5, SHA-1, SHA-256, SHA-512 or BLAKE2b-512. Use Argon2id with salt and resource settings; copy or download the result.

Decode JWT headers and claims, then verify a token with your key and claim settings. Inspect results locally; remote JWKS requires an explicit HTTPS request.

Inspect one PEM or DER X.509 certificate locally. Read identity, issuer, validity, extensions and SHA-256 fingerprint, then export the observed report.

Hash a local file with SHA-256, SHA-384 or SHA-512, compare the digest in hex or Base64, and export the verification report.

Create an RFC 6238 TOTP setup URI and QR code with chosen secret source, algorithm, digits and period; optionally inspect one code snapshot.