23 tools in this category

Security Tools

The security tools help with practical, everyday tasks: generating strong passwords, passphrases, PINs, and tokens; computing hashes and checksums; and inspecting things like JWTs. They run locally using the browser’s cryptographic random source where randomness matters, and they are honest about their limits — none of them claims unbreakable or guaranteed security, because no tool can.

What this category covers

This category covers generation of secrets and random values, hashing and checksums, and inspection utilities for credentials such as JWTs. The emphasis is on sound defaults and honest explanations rather than security theatre.

Common use cases

  • Creating a strong, unique password for a new account
  • Generating a memorable passphrase for a password manager
  • Computing a SHA-256 checksum to verify a download
  • Inspecting a JWT’s claims while debugging authentication
  • Producing a cryptographically secure token for testing

Best practices

  • Favour length over complexity; a longer passphrase usually beats a short string full of symbols.
  • Use a unique password for every account and store them in a password manager.
  • Treat crack-time estimates as rough guides, since they depend on assumptions about attacker speed.
  • Do real password hashing on the server with a purpose-built algorithm; browser tools are for learning and testing.
Featured tools

Tools in this category

Password Generator

Generate strong, customizable, or pronounceable passwords with a secure random source.

Launch tool

Password Strength Checker

Analyze password strength, entropy, and estimated crack time, entirely in your browser.

Launch tool

Secure Passphrase Generator

Generate memorable secure passphrases of 3–10 words with separators, capitalization, numbers, symbols, and an entropy readout. In-browser.

Launch tool

SHA-256 Hash Generator

Generate a SHA-256 hash from text or a file using the Web Crypto API.

Launch tool

JWT Decoder

Decode a JSON Web Token into its header, payload, and signature without verification.

Launch tool

HMAC Generator

Generate keyed HMAC signatures (SHA-1/256/384/512) from a message and secret key.

Launch tool
See all Security Tools
Related guides

Go deeper

Password Security Best Practices

What genuinely makes a password strong, why length beats complexity, and how to manage passwords sensibly.

7 min read

What Is Base64 Encoding?

Why Base64 exists, how it turns binary into text, and when inlining data with it helps or hurts.

7 min read
FAQ

Frequently asked questions

They are drawn from the browser’s cryptographic random source and never leave your device. As with any password, store it in a manager and do not reuse it.
No. Hashing is one-way — you cannot reverse a hash back to the input. Encryption is reversible with a key. Passwords should be stored using a slow, purpose-built hash, not plain encryption.
No. Decoding or inspecting a JWT reads its contents but does not check the signature. Always verify signatures server-side before trusting a token.
No. That phrase is marketing, not a standard. These tools use well-established algorithms and explain their limits honestly rather than making absolute claims.
Install Toolisco Add it to your device for offline, one-tap access.