Security & Cryptography
Generate hashes, passwords, tokens and work with JWTs and ciphers.
Create strong, random passwords with custom rules.
Open toolGenerate MD5, SHA-1, SHA-2 and SHA-3 hashes from any text.
Open toolHash passwords with Argon2id, bcrypt or scrypt using a salt.
Open toolGenerate random tokens, API keys and secrets in bulk.
Open toolDecode a JSON Web Token to inspect its header and payload.
Open toolCreate a signed JSON Web Token with HMAC (HS256/384/512).
Open toolEncrypt and decrypt text with a password using AES-256-GCM.
Open toolGenerate an HMAC signature from a message and secret key.
Open toolCheck password strength with entropy and estimated crack time.
Open toolEncode text to Base32 and decode Base32 back to text.
Open toolGenerate memorable, secure passphrases from random words.
Open toolGenerate time-based one-time passcodes from a Base32 secret.
Open toolGenerate an RSA public and private key pair in PEM format.
Open toolCheck whether a password matches a bcrypt hash.
Open toolEncode text to Base58 and decode Base58 back to text.
Open toolEncode and decode text with a keyword-based Vigenere cipher.
Open toolIdentify the likely type of a hash from its format.
Open toolVerify a JWT's HMAC signature and check its claims.
Open toolCompute MD5, SHA-1, SHA-256 and SHA-512 checksums of a file.
Open toolGenerate an ECDSA public and private key pair in PEM format.
Open toolGenerate a random AES key in hex and Base64.
Open toolGenerate secure random bytes in hex, Base64 or decimal.
Open toolEncode and decode Base64URL, the URL-safe Base64 variant.
Open toolGenerate a deterministic namespace UUID (version 5).
Open toolEncode or decode text with a Caesar shift cipher, including the popular ROT13.
Open toolAbout Security & Cryptography
These security and cryptography tools help you generate and inspect the building blocks of secure software: hashes, strong passwords, API tokens, password hashes and JSON Web Tokens.
Create MD5 and SHA hashes, generate random passwords and secrets, hash passwords with Argon2, bcrypt or scrypt, decode and sign JWTs, and experiment with classic ciphers, all in one place.
Everything runs entirely in your browser using your device's secure random generator, so passwords, secrets and tokens are never sent to a server.
