File hash

Drop a file. Compute MD5, SHA-1, SHA-256, SHA-384, SHA-512, CRC32 in parallel. MD5/CRC32 stream in 4 MB chunks; SHA digests buffer in memory (best for files up to a few hundred MB).

Drop a file or browse

Stays in your browser. Never uploaded.

Text hash

Paste any text. Hashes update as you type.

Input

0 B · 0 chars

HMAC

Keyed-hash message authentication code. Web Crypto, hex output.

Secret key Message

Output (verify webhook signatures: Stripe/GitHub use SHA-256 hex, Shopify/Pusher use base64)

Hash compare

Paste two hashes. Whitespace and case ignored.

A B

Enter two hashes…

Base64

Encode text or file to Base64 / Base64-URL. Decode back to text or downloadable file.

Input

Output

Drop file to encode or browse

Outputs Base64 string + optional data: URL

as data: URL (auto MIME)

URL · Query

Encode / decode + parse query strings into a readable table.

Input

Output

JWT · decode + sign

Decode header + payload, verify HS* signatures, and sign new tokens (HS256/384/512). Web Crypto HMAC — no upload.

JWT token

Header

Payload

HMAC secret (verify HS* signatures)

—

RS* / ES* / EdDSA verification not supported in-browser — paste only HMAC tokens (HS256 / HS384 / HS512).

Sign — build a new JWT

Algorithm Expires in (sec, optional)

Payload (JSON) HMAC secret

Token

Encrypt — AES-256-GCM

Password-based authenticated encryption. PBKDF2-SHA-256 600 000 iterations → AES-256-GCM. Output is a self-describing CTRYPT01 blob containing salt, IV, and iteration count — decrypt only needs the password.

Password

—

AAD · additional authenticated data (optional — binds ciphertext to context)

Plaintext

Ciphertext (Base64 CTRYPT01 blob)

Decrypt — AES-256-GCM

Decrypt any CTRYPT01 blob produced by the Encrypt tool. Wrong password fails fast (GCM tag verifies authenticity).

Password

AAD (must match exactly what was used at encrypt time)

Ciphertext (Base64)

Plaintext

Key pair — RSA / ECDSA

Generate cryptographic key pairs in-browser via Web Crypto. PEM-encoded output, downloadable. Keys never leave your browser.

Algorithm

Size / curve

—

Public key (PEM)

Private key (PEM)

Argon2id — password hashing

OWASP / RFC 9106 recommended password-hash. Runs in WebAssembly. Tune memory, iterations, parallelism — defaults match OWASP 2023+ (m=19 MiB, t=2, p=1).

Password Pepper (optional — server-side secret, HMAC-SHA256(password, pepper) before hash)

Memory (KiB)

Iterations

Parallelism

—

PHC string (verifiable)

Verify · paste PHC string + password

—

Bcrypt — password hashing

Classic password hash, still widely deployed (Node bcryptjs, Python bcrypt, PHP password_hash, Go x/crypto/bcrypt). PHC format $2b$rounds$salt+hash — cross-compatible with all listed.

Password Pepper (optional — HMAC-SHA256(password, pepper) then base64-truncate to 72 chars before bcrypt)

Rounds (cost): 12

Notes 2^N iterations. OWASP min 12. Each +1 doubles time.

—

PHC string

→ Apache/nginx .htpasswd line ($2y$)

Verify · paste PHC string + password above

—

Scrypt — memory-hard KDF

RFC 7914. Used by Litecoin, Tarsnap, Filebase. Memory-hard like Argon2 but older spec — still widely supported. Defaults match scrypt paper: N=2^15 (32 MiB), r=8, p=1.

Password Salt (hex or text)

N (cost) · power of 2

r (block size)

p (parallel)

Output bytes

Format

—

Derived key

Salt used (hex)

PBKDF2 — Password-Based Key Derivation 2

RFC 8018. OWASP 2023+ minimums: 600 000 iter SHA-256 / 210 000 SHA-512 / 1 300 000 SHA-1. Legacy but still standard (Bitwarden, 1Password, BitLocker historically).

Password Salt (hex or text)

Iterations

Hash

Output bytes

Format

—

Derived key

Salt used (hex)

Salt generator

CSPRNG salts in every format needed: raw bytes, bcrypt/scrypt/Argon2 PHC, base64, base64url, hex, Base64-no-padding. Crypto-strong via crypto.getRandomValues.

Size (bytes)

How many

live

AES-KW · Key wrapping (RFC 3394)

Wrap a symmetric key with another symmetric key (kek). NIST SP 800-38F. Used by JWE A128KW/A192KW/A256KW. Output is 8 bytes longer than input (auth tag).

KEK size

Key-to-wrap size

KEK (hex, leave empty to auto-gen) Key to wrap (hex, leave empty to auto-gen)

Wrapped key (hex)

Unwrap · paste wrapped key (hex) + KEK above

—

Unwrapped key (hex)

Shamir Secret Sharing (k-of-n)

Split a secret into N shares; any K reconstruct it. Used by HashiCorp Vault unseal, GnuPG threshold signing, social recovery wallets. Pure GF(256) math — perfect secrecy with < K shares.

Secret (text)

Total shares (N)

Threshold (K) · needed to reconstruct

Shares (one per line — distribute separately)

Reconstruct · paste any K shares (one per line)

—

Recovered secret

HKDF — key derivation (RFC 5869)

Derive cryptographic subkeys from any input key material. SHA-256/384/512. Standard for key expansion (TLS, Noise, Signal, age, etc.).

IKM (input key material) Salt (optional, recommended) Info / context (optional)

Hash

Output bytes

Format

live

Output

Sign · Verify — Ed25519 / RSA-PSS

Generate keypair → sign message → verify signature. Ed25519 (RFC 8032) — modern, fast, 64-byte signatures. RSA-PSS — wider compatibility.

Algorithm

—

Private key (PEM / raw hex for Ed25519)

Public key

Message

Signature (base64)

Verify · paste signature + public key + message above

—

TOTP · 2FA — RFC 6238

Time-based One-Time Password — what Google Authenticator / Authy / 1Password TOTP feature use. Generate secret + otpauth URL + QR; verify live codes.

Issuer (your app)

Account (user)

Algorithm

Digits

Period (s)

Or import an existing secret — verify codes for a seed you already own

Base32 secret

otpauth:// URL (paste into authenticator)

— — — — — —

—

Verify a code

—

Prompt Vault

Encrypt + version + tag LLM system prompts / tool definitions / templates. AES-256-GCM with PBKDF2 600 000 iter from master password. Vault stays in localStorage — nothing leaves the browser. Export to JSON for team share.

Master password

No vault detected — entering a password creates one.

PASETO v4.public — Platform-Agnostic Security Tokens

Modern JWT alternative — purpose-built, no algorithm confusion (RFC 9111 / paseto.io). v4.public uses Ed25519 signatures. Each version+purpose is one fixed primitive — impossible to misuse.

Claims (JSON) Footer (optional, plaintext or JSON)

—

Public key (paseto-paserk v4.public)

Secret key (paseto-paserk v4.secret) · 64 bytes

Token

Token Public key (k4.public.* or raw base64url 32 bytes)

—

Decoded claims

Footer

Multi-recipient encrypt (age-style)

Generate fresh AES-256 data-encryption-key (DEK). Wrap DEK with each recipient's RSA-OAEP public key. Output JSON bundle — any single recipient can decrypt with their private key. Pattern: age / GPG multi-recipient / Signal sender keys.

Recipients (RSA-OAEP public keys, PEM) 0 recipients Message

Encrypted bundle (JSON)

Decrypt: paste bundle Your private key (PEM, RSA-OAEP)

Plaintext

RAG vector encryption

Encrypt embedding arrays + metadata for client-side-encrypted RAG (vector store stays oblivious). Per-chunk AES-256-GCM keyed via HKDF from master key + chunk-id. Float32 packed for size.

Master password

Input chunks (JSON array)

—

Result (encrypted bundle / decrypted plaintext)

Post-Quantum Crypto — ML-KEM-768 + ML-DSA-65

NIST PQC standards FIPS 203 (ML-KEM, key encapsulation, ex-Kyber) + FIPS 204 (ML-DSA, signatures, ex-Dilithium) — finalized 2024. Quantum-resistant. Implementation: @noble/post-quantum via dynamic ESM import.

Loading library…

Public key (base64)

Secret key (base64)

Encapsulate · paste recipient public key (base64)

Ciphertext (base64) · ship to recipient

Shared secret (base64) · keep this

Decapsulate · paste ciphertext (uses secret key above)

Recovered shared secret (base64)

Message

Signature (base64)

Verify · paste public key + signature + message above

—

Token generator

Cryptographically random tokens via crypto.getRandomValues. Bulk up to 100.

Length

Count

Charset

Presets

Modern · production tokens

exclude ambiguous (0/O/o/I/l/1)

live

UUID

v4 (random) and v7 (time-ordered, sortable). Bulk up to 100.

Version

Count

live

Password

Generate strong passwords, analyse any password's strength, or build BIP-39 passphrases — one toolkit.

Length: 20

Count

live

Input

Reveal

Score

—

Bits—

Length—

Charset—

Crack time

Online throttled (10/s)—

Online unthrottled (100/s)—

Offline slow hash (10k/s)—

Offline fast hash (1B/s)—

Findings

—

Passphrase — BIP-39 wordlist

Diceware-style memorable passphrases from the 2048-word BIP-39 list (11 bits / word). 6 words ≈ 66 bits, 12 words ≈ 132 bits (Bitcoin standard).

Word count: 8

How many

Separator

Capitalize each word Append random digits Append random symbol

live

—

QR code

Generate from any text or URL. Download PNG or SVG. Error-correction H by default (works with logos / damage).

Presets

Content

Size (px)

Margin

Error-correction

Foreground

Background

live

Markdown scanner

Scan Markdown / HTML for malicious payloads and prompt-injection vectors before rendering, indexing, or feeding to an LLM. 20+ rules across XSS, hidden chars, IDN homoglyphs, URL shorteners, prompt injection, base64 exfil blobs.

Drop .md file or browse · or paste below

Markdown / HTML source

live

Random

Numbers, bytes, picks, shuffles. All from crypto.getRandomValues.

Numbers

Min

Max

Count

Bytes

Format

Pick / shuffle List (one per line)

JSON → TS / Zod / JSON Schema

Paste a JSON sample → get a typed schema. Optionally treat numeric-keyed arrays as tuples, mark every field optional, or merge structurally-equivalent items.

Input

Target Root name All optional Merge array items

Output

Recipe pipeline

Chain operations on a single input. Each step transforms the previous step's output. Drag a step to reorder, click ✕ to remove. Output updates live.

Input

Recipe (steps)

Add step

Output

Intermediate steps

Cron builder

5-field crontab — minute · hour · day-of-month · month · day-of-week. Live human description + next 5 fire times (UTC). 8 presets.

Expression

Human description

—

Next 5 fire times (UTC)

Network

IPv4 subnet calculator · IPv4 base converter · IPv6 expand/compress · MAC generator. All in-browser, instant.

IPv4 subnet calculator

CIDR

IPv4 base converter

Dotted Integer Hex Binary

IPv6 expand / compress

IPv6

Expanded—

Compact—

MAC generator

Format OUI (optional) Count

CSP · Security headers

Paste a Content-Security-Policy or a raw response-header block. Parsed, graded, and audited for the usual footguns — entirely in-browser.

CSP analyzer

—

Security headers grader

—

X.509 · SSH keys

Decode a PEM certificate (subject, SAN, validity, fingerprints) or generate an Ed25519 SSH keypair in OpenSSH format. Nothing leaves the browser.

X.509 certificate decoder

—

SSH Ed25519 keypair (OpenSSH format)

Comment

—

Public key (authorized_keys line)

Private key (OpenSSH PEM — unencrypted, handle with care)

Fingerprint

DNS · Email auth

SPF, DMARC, DKIM, MX and CAA for any domain — queried over DNS-over-HTTPS (Google with Cloudflare fail-over), audited client-side.

Domain check

Domain DKIM selector (optional)

—

Regex tester

Live matching with highlighted results, group capture, and replace preview. JavaScript regex engine, in-browser.

Pattern

Expression Flags

—

Test string Matches (highlighted)

Match details

Replace preview

Replacement ($1, $<name> supported)

Data convert

Lossless conversion between JSON, YAML, TOML, and XML. Auto-detects source format, pretty prints, swaps with one click. All in-browser.

Source

From To Indent

Output

Timestamp · date

Convert between Unix epoch (seconds / milliseconds), ISO-8601, UTC and local time. The input format is auto-detected; nothing leaves your browser.

Epoch or date

Unix (s)—

Unix (ms)—

ISO-8601 (UTC)—

UTC—

Local—

Relative—

Number base

Convert an integer across binary, octal, decimal, hexadecimal and any radix 2–36. BigInt-backed, so 64-bit values and bitmasks keep full precision (no 2⁵³ rounding).

Binary

Octal

Decimal

Hex

Custom radix (2–36)

Value in that radix

Case convert

Re-case identifiers and text across every common convention. Word boundaries are detected from case changes, separators and digit transitions (acronym-aware: parseHTTPResponse → parse_http_response).

Input

camelCase—

PascalCase—

snake_case—

kebab-case—

CONSTANT_CASE—

dot.case—

path/case—

Title Case—

Sentence case—

lower—

UPPER—

Text · JSON diff

Line-by-line diff of two texts, fully in your browser (never paste a config into a random web differ). JSON mode normalizes key order + formatting first, so only real value changes show. The constant-time Hash compare stays separate for secrets.

ignore whitespace ignore case

Original (A)

Changed (B)

—