Security Tools
A set of browser-based security utilities: RSA/ECDSA key pair generation, AES file encryption, JWT building and signature verification, TOTP/2FA code generation, and SSL certificate and CSR decoding. Everything runs locally in your browser, so nothing you generate, encrypt, or decode is ever sent to a server.
RSA/ECDSA Key Generator
Generate an RSA or ECDSA key pair with the Web Crypto API and export it as standard PEM.
Open toolAES File Encryptor/Decryptor
Encrypt or decrypt a real file with password-based AES-256-GCM, entirely in your browser.
Open toolJWT Builder
Build a JWT from a JSON payload and sign it with HS256, HS384, or HS512.
Open toolJWT Debugger & Signature Verifier
Decode a JWT's header and payload, and verify its signature with a secret or public key.
Open toolTOTP/2FA Authenticator & Token Generator
Generate live RFC 6238 TOTP codes from a Base32 secret, or create a new secret with a scannable QR code.
Open toolSSL Certificate Decoder & Inspector
Decode a PEM X.509 certificate's subject, issuer, validity, public key, and extensions.
Open toolCSR Decoder
Decode a PEM CSR's subject, public key, and requested extensions like Subject Alternative Name.
Open toolCSP Header Generator
Build a Content-Security-Policy header as the exact config snippet for Nginx, Apache, Express, or Next.js.
Open toolCORS Configuration Generator
Build a CORS configuration as real syntax for Express, Next.js, Nginx, Apache, or Spring Boot.
Open toolHTTP Security Headers Generator
Generate raw HTTP security header lines: HSTS, X-Frame-Options, Permissions-Policy rows, and COOP/COEP.
Open toolSSH Config File Generator
Build a ~/.ssh/config file from repeatable Host blocks: alias, HostName, User, Port, IdentityFile, ProxyJump.
Open toolSSH Key Generator Commands
Get the exact local ssh-keygen command for Ed25519 or RSA, with your chosen comment and filename. Commands only, no key material.
Open toolSSL/TLS Config Generator
Generate a hardened TLS config (protocols, ciphers, session settings) for Nginx, Apache, HAProxy, or Caddy, per Mozilla's SSL profiles.
Open toolJWT Secret Generator
Generate a high-entropy HMAC secret sized correctly for HS256, HS384, or HS512, output as hex and base64.
Open toolCSR Generator Commands
Get the exact local openssl req command to generate a CSR and private key for your subject, key type, and SANs. Commands only, no key material.
Open tool