Skip to main content
Tool category

Security & Identity

Generate and assess passwords, calculate hashes and HMACs, inspect or verify JWTs, and create UUID or NanoID identifiers locally.

9 tools · 7 subcategories

Generators

Create configurable random passwords locally with selected length and character classes for account or secret setup.

View subcategory
Password and Passphrase GeneratorGenerate 6-64-character pooled passwords or 3-8-word passphrases locally with browser randomness, optional similar-character exclusion, custom characters, separators, and opt-in session history. Essential for anyone creating strong, unique passwords for accounts, APIs, and secure access.Security & Identity / GeneratorsTry it

Cryptography

Calculate MD5 or SHA digests and decode JWT header and payload claims without presenting decoded data as verified trust.

View subcategory
Hash GeneratorGenerate standards-compatible MD5 plus Web Crypto SHA-1, SHA-256, and SHA-512 hexadecimal digests from UTF-8 text entirely in your browser. Useful for verifying file integrity, creating fingerprint identifiers, password storage research, and data deduplication. MD5 is included for legacy compatibility only.Security & Identity / CryptographyTry it
JWT DecoderParse a three-segment JSON Web Token into UTF-8 JSON header and payload objects, inspect registered/custom claims and timing, and view signature bytes without verifying trust. Essential for developers debugging authentication flows, inspecting token contents, and diagnosing expiry or audience mismatches locally.Security & Identity / CryptographyTry it

Inspectors

Explore nested JWT header and payload values in a type-aware tree while keeping signature verification a separate step.

View subcategory
JWT Tree ViewerDecode a compact JWT locally and explore nested header and payload objects or arrays in a collapsible, type-aware tree without displaying verification as trust. Ideal for developers inspecting complex nested claims, custom JWT fields, and deep authorization structures in tokens.Security & Identity / InspectorsTry it

Validators

Verify HS256, HS384, or HS512 JWT signatures and report exp, nbf, and iat claim status using browser Web Crypto.

View subcategory
HMAC JWT VerifierVerify compact HS256, HS384, or HS512 JWT signatures with a literal UTF-8 shared secret and report structural, exp, nbf, and iat status locally. Essential for developers testing HMAC-based token verification, debugging signature mismatches, and validating token integrity without a server.Security & Identity / ValidatorsTry it

Identifiers

Generate standards-based UUIDs or compact NanoIDs locally with explicit quantity, length, and alphabet controls.

View subcategory
UUID GeneratorUUID Generator creates RFC 4122-style version 4 identifiers from browser cryptographic randomness and can return a requested local batch. Essential for developers generating unique database primary keys, session identifiers, transaction references, and distributed system node IDs.Security & Identity / IdentifiersTry it
Nano ID GeneratorNano ID Generator draws random bytes with Web Crypto, maps them to the selected alphabet, and returns IDs of the requested length in this browser. Ideal for developers generating compact unique identifiers for database records, URL slugs, session tokens, and distributed systems.Security & Identity / IdentifiersTry it

Passwords

Assess password length and character composition, explain detected weaknesses, and estimate relative strength locally.

View subcategory
Password Strength CheckerPassword Strength Checker evaluates the entered password with the workspace's local rules and estimates; it cannot prove resistance to every attack or breach corpus. Useful for users assessing password quality, administrators setting policy guidelines, and developers testing validation rules.Security & Identity / PasswordsTry it

Hashing

Create keyed HMAC digests with the selected SHA algorithm, message, secret, and output encoding entirely in the browser.

View subcategory
HMAC Authentication Code GeneratorGenerate lowercase-hex HMAC-SHA-256, HMAC-SHA-384, or HMAC-SHA-512 from UTF-8 message and literal UTF-8 secret using Web Crypto. Essential for developers testing API signature verification, webhook authentication, and message integrity protocols. Supports all three SHA-2 family truncation levels.Security & Identity / HashingTry it
Are these tools private and available offline?

Processing happens locally in browser memory. After the application has been cached, supported tools can continue working offline without sending your input to a server.

Current category