Hashes & tokens
Digest, sign, decode and inspect, without sending anything anywhere.
Hash generatorMD5, SHA-1, SHA-256, SHA-384 and SHA-512 of text or a file, with HMACsha256("abc") = ba7816bf…JWT decoderRead the header and claims of a JSON Web Token, check expiry, verify HS256eyJhbGciOi… → { alg, exp, sub }UUID & ULID generatorGenerate v4, v7 and ULIDs in bulk, or inspect one to see its version and timestampv7: 019a… (sortable)Password & passphrase generatorRandom passwords and word-based passphrases with entropy in bits and time-to-crackcorrect-horse-battery-staple-river → 63 bitsbcrypt, Argon2 & scrypt hasherHash a password or verify one against an existing hash, entirely in the browser$2b$12$… · $argon2id$v=19$m=19456…TOTP / 2FA code generatorPaste a Base32 secret or otpauth:// URI and get the current 6-digit code, for debugging 2FA setupsJBSWY3DPEHPK3PXP → 492039 (23 s left)SSL certificate & CSR decoderPaste a PEM certificate, CSR or public key and read every field, extension and fingerprint-----BEGIN CERTIFICATE----- → subject, SAN, expirySSH key fingerprint & converterFingerprint an OpenSSH public key, convert OpenSSH ⇄ PEM, build authorized_keys linesssh-ed25519 AAAA… → SHA256:…HTTP security headers & CSP analyzerPaste curl -I output or a Content-Security-Policy: every header explained, graded, and the CSP evaluated for XSS bypassescurl -I → grade B · CSP: unsafe-inline, cdnjs bypassWebhook signature verifierCheck GitHub, Stripe, Slack, Shopify, Twilio, Svix and generic HMAC signatures against a payloadsha256=… matches ✓Random bytes & token generatorCryptographically random hex, Base64, API keys, numbers and dice, from your browser’s CSPRNG32 bytes → 64 hex chars