Security & Tokens

Generate strong, customizable, or pronounceable passwords with a secure random source.

Analyze password strength, entropy, and estimated crack time, entirely in your browser.

Decode a JSON Web Token into its header, payload, and signature without verification.

Inspect a JWT with decoded claims, timestamps, and expiry warnings.

View a JWT as pretty-printed header and payload JSON, side by side.

Generate bcrypt password hashes in your browser with a custom cost factor and execution-time display. Nothing is uploaded.

Generate random alphabetic, numeric, alphanumeric, hex, Base64, or custom-charset strings with a secure random source. In-browser.

Generate cryptographically secure random numbers with min/max, integer or decimal, unique values, and multiple results. In-browser.

Generate cryptographically secure tokens — 16/32/64/128 bytes as hex, Base64, or URL-safe, plus JWT-secret and API-key presets. In-browser.

Measure password entropy, strength score, estimated crack time, and character pool, with suggestions to improve it. In-browser.

Identify likely hash algorithms from a hash string — bcrypt, MD5, SHA family, Argon2, and more — with confidence levels. In-browser.

Generate memorable secure passphrases of 3–10 words with separators, capitalization, numbers, symbols, and an entropy readout. In-browser.

Generate custom-length hexadecimal strings from a cryptographically secure random source. In your browser.

Generate secure random bytes and view them as hex, binary, Base64, or decimal. Copy or download. In your browser.

Generate secure 4, 6, 8-digit or custom-length PINs, with an option for no repeated digits. In your browser.