security

Generate a bcrypt hash of a password with a chosen cost factor, entirely in your browser.

Parse an existing bcrypt hash string into its version, cost factor, salt, and hash components.

Look up an MD4 hash against a small bundled dictionary of common values, entirely in your browser.

Look up an MD5 hash against a small bundled dictionary of common values, entirely in your browser.

Look up an MD6 hash against a small bundled dictionary of common values, entirely in your browser.

Look up a Whirlpool hash against a small bundled dictionary of common values, entirely in your browser.

Live-search for two random inputs whose MD2 digests match on a truncated, user-chosen number of bits.

Live-search for two random inputs whose MD4 digests match on a truncated, user-chosen number of bits.

Live-search for two random inputs whose MD5 digests match on a truncated, user-chosen number of bits.

Live-search for two random inputs whose Whirlpool digests match on a truncated, user-chosen number of bits.

Compute an HMAC (MD5, SHA-1, SHA-256, SHA-384, or SHA-512) for a message and secret key.

Identify the likely algorithm behind a hash string by its prefix, structure, and length.

Scan JSON string values for patterns commonly seen in SQL injection attempts.

Build a CIDR-based allow or deny list for Nginx, HAProxy, or iptables.

Build firewall rules for UFW, iptables, or nftables from port/protocol/source/action rows.

Generate an RSA or ECDSA key pair with the Web Crypto API and export it as standard PEM.

Encrypt or decrypt a real file with password-based AES-256-GCM, entirely in your browser.

Build a JWT from a JSON payload and sign it with HS256, HS384, or HS512.

Decode a JWT's header and payload, and verify its signature with a secret or public key.

Generate live RFC 6238 TOTP codes from a Base32 secret, or create a new secret with a scannable QR code.

Decode a PEM X.509 certificate's subject, issuer, validity, public key, and extensions.

Decode a PEM CSR's subject, public key, and requested extensions like Subject Alternative Name.

Build a Content-Security-Policy header as the exact config snippet for Nginx, Apache, Express, or Next.js.

Build a CORS configuration as real syntax for Express, Next.js, Nginx, Apache, or Spring Boot.

Generate raw HTTP security header lines: HSTS, X-Frame-Options, Permissions-Policy rows, and COOP/COEP.

Build a ~/.ssh/config file from repeatable Host blocks: alias, HostName, User, Port, IdentityFile, ProxyJump.

Get the exact local ssh-keygen command for Ed25519 or RSA, with your chosen comment and filename. Commands only, no key material.

Generate a hardened TLS config (protocols, ciphers, session settings) for Nginx, Apache, HAProxy, or Caddy, per Mozilla's SSL profiles.

Generate a high-entropy HMAC secret sized correctly for HS256, HS384, or HS512, output as hex and base64.

Get the exact local openssl req command to generate a CSR and private key for your subject, key type, and SANs. Commands only, no key material.

Escape HTML-significant characters so text renders literally.

Generate a random string with a chosen length and character sets.

Generate random API keys with a custom prefix, length, and character set.

Generate memorable, high-entropy passphrases from the EFF's short Diceware word list.

Generate strong, random passwords with crypto.getRandomValues(), no modulo bias, with an entropy estimate.

Build a Kubernetes NetworkPolicy manifest with pod/namespace selectors, IP block rules, and separate ingress/egress rules.

Build a Kubernetes Role or ClusterRole with rules, plus its matching RoleBinding or ClusterRoleBinding.

Generate a Kubernetes ServiceAccount manifest with labels, annotations, token automounting, and image pull secrets.

Generate a Compose/Swarm secrets block (file-based or external), a service reference, and a BuildKit --secret build snippet.

Generate an AES-256 key and IV for one secret env var, with matching openssl, Node, and PowerShell decrypt commands.

Generate a Cloudflare Pages _headers snippet with HSTS, CSP, Referrer-Policy, and more, with sensible defaults.

Build a Content-Security-Policy header string for Cloudflare Pages, with toggles for common sources and a report-only mode.

Generate one or many random numeric PIN codes, 4-8 digits long, using a cryptographically secure random source.