Categories
🔒 Security
Security-related tools for JWT, hashing, HMAC, encryption, and password strength.
Tools in this category
Generate SHA-1, SHA-256, SHA-384, and SHA-512 hash values from text.
Generate a JWT from a header, payload, and secret.
Validate a JWT's format, expiration, and signature.
Generate an HMAC from a message, secret, and algorithm.
Generate an HTTP Basic Authentication Authorization header from a username and password.
Generate and verify time-based one-time passwords (TOTP) from a Base32 secret.
Encrypt and decrypt text with AES (CBC, GCM, CTR) using your own key and IV, or with a passphrase.
Generate an RSA public/private key pair in PEM format.
Generate a bcrypt hash from a password or other text, and verify it against an existing hash.
Check the strength of a password on a 5-level scale and get improvement tips.
What you can do here
Tokens
Decode a JWT, generate one, and verify its signature.
Hashes and signatures
Generate SHA hashes, HMACs, and bcrypt hashes.
Encryption and authentication
Encrypt and decrypt with AES, generate RSA key pairs and TOTP one-time passwords, and build Basic authentication headers.
Password strength
Evaluate how strong a password is.
Common use cases
Check a JWT's expiry and claims while investigating an authentication error
Compare HMAC results when verifying a webhook signature
Prepare keys and one-time passwords for development and testing