Security & Cryptography Suites
Client-side JWT inspectors, hash generators, encryption suites, and credential evaluators with zero server uploads.
Explore Other Categories:
Generate complete email DNS records including SPF, DKIM, DMARC, MX, and BIMI. Export BIND zone files, prevent spoofing, and ensure 100% inbox deliverability.
Debug JWT tokens online with our JWT debugger tool. Decode header and payload claims, verify HS256, RS256, and ES256 signatures, and inspect expiry locally.
Generate secure Content Security Policy (CSP) headers instantly. Configure script-src, style-src, nonces, and hashes to prevent XSS attacks and fix CSP errors.
Decode, debug, and inspect JSON Web Tokens (RFC 7519) locally in your browser. Inspect header claims, payload tokens, expiration countdowns, and verify signatures with zero server transmission.
Generate cryptographically secure high-entropy passwords, memorable passphrases, PINs, and API tokens using browser-native Web Crypto CSPRNG with NIST SP 800-63B validation.
Calculate instant cryptographic checksums across SHA-256, SHA-512, MD5, SHA-1, SHA-3, Keccak, and CRC32 with 100% in-browser Web Crypto security.
Decode, debug, inspect, and verify HMAC (HS256/384/512) and RSA (RS256/384/512) signatures 100% locally in browser memory. Zero cloud transmission.
Evaluate password resilience against brute-force attacks with Shannon entropy calculations, zxcvbn pattern matching, crack time estimates, and zero server transmission.
Hardware-accelerated AES-256 authenticated encryption executed strictly in your browser via Web Crypto API. Zero server retention.
Parse and inspect PEM-encoded SSL/TLS certificates locally, displaying Subject Alternative Names (SAN), issuer authority, SHA-256 fingerprints, and expiration validity dates.
Convert text, hex, and cryptographic public keys to and from Bitcoin and IPFS Base58 / Base58Check formats with SHA-256 double-hash checksum verification.
Generate cryptographically secure Eksblowfish password hashes with adjustable salt rounds (4-16) and verify candidates locally in browser memory.
Calculate and verify RFC 2104 Keyed-Hash Message Authentication Codes across HMAC-SHA256, HMAC-SHA512, HMAC-SHA1, and HMAC-MD5 with timing-safe verification.
Generate cryptographically secure RSA public and private key pairs (1024, 2048, 4096-bit) in PKCS#1 and PKCS#8 PEM formats using browser Web Crypto API.
Simulate and debug modern TLS cryptographic handshakes, ECDHE key exchanges, ALPN protocol negotiation, and AES-GCM / ChaCha20 cipher suite security.
Generate Curve25519 private/public keypairs, preshared keys (PSK), and complete wg0.conf server/client configuration profiles with zero server storage, local browser cryptography, and instant QR code provisioning.
Build unified OpenVPN .ovpn connection profiles with embedded CA certificates, client certificates, private keys, and TLS-Auth/TLS-Crypt signatures for seamless multi-platform import on iOS, Android, macOS, and Linux.
Analyze website HTTP response headers for Content-Security-Policy (CSP), Strict-Transport-Security (HSTS), X-Frame-Options, Permissions-Policy, and CORS safety.
Convert JSON Web Keys (JWK / JWKS) to PKCS#8 PEM format and extract public/private RSA key components securely in browser.
Generate and sign custom JSON Web Tokens (JWT) locally with HS256/RS256, custom claims, and expiration controls for frontend & API testing.
Compute cryptographic SHA-256, SHA-384, and SHA-512 Base64 hashes and generate secure HTML script/link tags for CDN resources locally.
Inspect, parse, and validate RSA, ECDSA, and Ed25519 PEM keys (PKCS#1, PKCS#8, SPKI) locally in your browser with zero data transmission.
Generate RFC 6238 time-based one-time passwords (TOTP), test 2FA secret keys, inspect otpauth:// URIs, and simulate token countdowns client-side.
Audit JWT tokens locally for known weak HMAC secret keys, brute-force dictionary vulnerabilities, and verify signatures against custom candidate secrets.
Inspect OpenSSH public keys (RSA, Ed25519, ECDSA), compute SHA-256 and MD5 fingerprints, and generate authentic OpenSSH ASCII Randomart visual art.
Convert internationalized domain names (IDN) bidirectionally between Unicode and ASCII Punycode (xn--) with built-in homograph attack and script spoofing analysis.
Parse raw HTTP request and response headers into structured key-value tables, inspect Cache-Control directives, evaluate security posture, and decode Set-Cookie tokens.
Generate cryptographically secure, memorable multi-word passphrases using EFF Diceware wordlists, custom delimiters, number injection, and instant Shannon entropy calculation.
Design RFC 7519 registered and custom JWT claims with timestamp calculators for exp, nbf, iat, jti, and audience tags.
Generate WireGuard Curve25519 public and private key pairs, preshared keys (PSK), and client/server configuration blocks.
Generate secure HTTP Basic Authentication passwords and .htpasswd entries with Bcrypt, Apache MD5 (APR1), and SHA-1 hashing.
Convert RFC 7517 JSON Web Keys (JWK / JWKS) to PKCS#8 / SPKI PEM format and convert public/private PEM keys to JWK structures.
Build, inspect, and validate modern Permissions-Policy HTTP response headers (camera, microphone, geolocation, payment) with strict per-origin allowlists.
Generate HTTP Strict-Transport-Security (HSTS) headers with max-age calculator, includeSubDomains, and Chrome preload readiness check.
Create production-hardened Linux sshd_config files disabling root login, enforcing public keys, limiting ciphers, and setting idle timeouts.
Generate Ubuntu UFW firewall rules, default drop policies, rate limiting, and port forwarding commands with an executable bash script.
Construct Linux iptables firewall rules for INPUT, FORWARD, and OUTPUT chains, stateful inspection, SYN flood mitigation, NAT port forwarding, and export production shell scripts.
Build, validate, and optimize RFC 7208 compliant SPF TXT records with IPv4/IPv6 CIDR ranges, MX, A, include mechanisms, and soft/hard fail policies.
Generate RFC 7489 compliant DMARC DNS TXT records with policy enforcement (none/quarantine/reject), rua/ruf aggregate reports, and alignment tags.
Generate RFC 8659 compliant Certification Authority Authorization (CAA) DNS records to restrict SSL/TLS certificate issuance, configure wildcard policies, and set up violation reporting.
Generate RFC 6376 compliant DNS DKIM TXT records with selector, public key formatting (v=DKIM1; k=rsa; p=...), and verification guidance.
Generate RFC 8461 Mail Transfer Agent Strict Transport Security (MTA-STS) policy files and _mta-sts/_smtp._tls DNS TXT records.