Security & Password Tools
Passwords, encryption, JWT and 2FA. · ۱۵ tools
AES Text EncryptionEncrypt or decrypt text with a password using AES-256-GCM and PBKDF2, entirely in your browser via the Web Crypto API — nothing is ever transmitted anywhere.API Key GeneratorGenerate cryptographically secure API keys in hex, base64url or UUID format, with a custom prefix and bulk generation.CSP Header GeneratorBuild a Content-Security-Policy header from common directives (script-src, style-src, img-src), with a keyword reference and weak-setting warnings.Email ObfuscatorConvert a plain email address into scraper-resistant HTML (entities, JS document.write, CSS-reversed text) to publish without exposing it to bots.Encrypted Share LinkEncrypt a message with a password and pack it into a shareable link’s URL fragment — the server never sees the message, since fragments never leave the browser.File EncryptorEncrypt or decrypt any file with a password using AES-256-GCM, entirely in your browser — the file never leaves your device.Htpasswd GeneratorGenerate an Apache/nginx .htpasswd line from a username and password, using bcrypt (recommended) or SHA-1 hashing, entirely in your browser.Image SteganographyHide a text message inside a PNG image using least-significant-bit encoding, invisible to the eye but recoverable — entirely in your browser.JWT DecoderDecode a JSON Web Token’s header and payload locally, with human-readable timestamps for exp/iat/nbf — does not verify the signature.JWT GeneratorBuild and sign a JSON Web Token (HS256/384/512) from a header, payload and secret, entirely client-side via the Web Crypto API’s HMAC implementation.Passphrase GeneratorGenerate memorable Diceware-style passphrases from random dictionary words, with configurable word count, separators, capitalisation and exact entropy.Password GeneratorGenerate cryptographically secure passwords with full control over length, character sets, ambiguous-character exclusion and exact entropy.Password Strength CheckerAnalyses a password’s real guessing resistance by detecting common passwords, dictionary words, sequences and keyboard walks, not just length and symbols.Pwned Password CheckerChecks whether a password appeared in known data breaches via the Have I Been Pwned k-anonymity API — only a 5-char hash prefix ever leaves your browser.TOTP GeneratorGenerate the current time-based one-time password (RFC 6238) for a base32 secret, with a live countdown — the same algorithm used by authenticator apps.
Create strong passwords and passphrases, check password strength, encrypt text and files with AES-256-GCM, decode JWTs and generate 2FA codes. Randomness comes from your browser’s cryptographically secure generator.
Secrets are processed on your device and never sent to Toolew. The breach checker uses k-anonymity, so only the first five characters of a hash ever leave your browser.
Categories
Text & WritingDeveloper ToolsJSON, XML, YAML & CSVEncoders & DecodersImage ToolsPDF ToolsVideo & Audio ToolsFinance CalculatorsHealth & Fitness CalculatorsMath CalculatorsDate & Time ToolsUnit & Currency ConvertersSEO & Marketing ToolsSocial Media ToolsColor & Design ToolsCSS, HTML & JS ToolsHash & Crypto ToolsQR Code & BarcodeRandom GeneratorsProductivity ToolsEducation & Student ToolsData Analysis ToolsRegex & ValidationNetwork & Web ToolsFun & GamesFile Tools