Security / Crypto Tools

Generate cryptographic hashes with streaming

Generate HMAC with multiple algorithms

Encode a JWT token from header, payload, and secret

Generate bcrypt hashes and verify passwords against hashes

Generate HMAC signatures using SHA-256, SHA-512, and more

Analyze password strength with entropy and crack-time estimates

Generate time-based one-time passwords from a secret key

Decode Base64-encoded SAML responses into readable XML

Generate PKCE parameters with S256/plain support, state, and nonce. Includes OAuth flow examples

Calculate the fingerprint of an SSH public key

Decode PEM-encoded Certificate Signing Requests

Scan text/code for leaked API keys, tokens, and credentials

Generate RSA public/private keypairs in PEM format

Decode JWT + show iat / nbf / exp as ISO + delta from now

AES-256-GCM encryption with authenticated ciphertext (iv:tag:body)

Classic Caesar-13 substitution — encrypt and decrypt are the same op

Shift letters by any N positions (±26) — enc/dec with custom shift

Polyalphabetic cipher using a keyword — stronger than Caesar

Hebrew alphabet substitution — A↔Z, B↔Y — self-inverse

Transposition cipher in a zig-zag pattern across N rails — enc/dec

Analyze password strength with recommendations

Calculate file hashes (MD5, SHA256, SHA512, etc)

Decode OAuth 2 and OIDC tokens, explain every claim and scope, and name opaque ones

Build or take apart a JWT and see exactly which checks a verifier would fail it on

Break an X.509 certificate into every extension and test whether it really serves a hostname

Grade cipher suites in either spelling and emit a config with the weak ones removed

Walk every packet of an armoured PGP public key: fingerprint, user IDs, subkeys and checksum

Convert an SSH public key between OpenSSH, RFC 4716, PEM and JWK, with both fingerprints

Shannon, charset and realistic guessing entropy side by side, with the patterns discounted

Time real bcrypt on the server and pick the highest cost factor your login budget allows

Parse Argon2 encoded hashes and model memory, pass and lane settings — no hash is computed

Generate self-signed TLS certificates with custom CN, validity, and key size configuration

Generate Certificate Signing Requests (CSR) for CAs with subject information

Generate RSA or EC key pairs with configurable key size and curve

Verify RSA/EC cryptographic signatures with public key validation

Verify HMAC-SHA256 signatures with constant-time comparison analysis

Verify file/content hash integrity with algorithm detection and mismatch reporting

Validate certificate chains for completeness, signatures, dates, and trust paths

Decode a PEM certificate and CRL and check whether that serial is on that list — no CRL is downloaded and no OCSP responder is contacted

Decode a certificate's real OCSP responder URL and certID, decode and verify a signed OCSP response, and get the openssl ocsp command

Validate certificate pinning configurations and verify public key hash pins

Detect potential SQL injection vulnerabilities in query strings