Generate secure passwords, UUIDs, hashes, and decode JWT tokens. Everything runs locally in your browser — nothing leaves your device.
JWT Decoder
Decode and inspect JWT tokens instantly.
Password Generator
Generate strong, secure random passwords with customizable options.
Passphrase Generator
Generate memorable, secure passphrases from word lists.
UUID Generator
Generate UUID v4 identifiers instantly.
UUID Validator
Validate UUID strings and identify the version (v1, v2, v3, v4, v5).
Hash Generator
Generate SHA-1, SHA-256, SHA-384, and SHA-512 hashes from text.
JWT Generator
Generate signed JWT tokens for testing with custom headers and payloads.
Bcrypt Hash Generator
Generate bcrypt password hashes with configurable salt rounds.
API Key Generator
Generate cryptographically secure API keys in hex, base64, alphanumeric, and UUID formats.
HMAC Generator
Generate HMAC hashes with SHA-256, SHA-384, and SHA-512 algorithms.
AES Encrypt
Encrypt and decrypt text using AES-256-GCM with a password-based key.
Security is a critical concern for every developer and organization. From generating strong passwords and cryptographic hashes to decoding and inspecting JWT tokens, having reliable security tools online at your fingertips streamlines secure development practices. Our cryptography tools run entirely in your browser — sensitive data like passwords, tokens, and hashes never leave your device, ensuring complete privacy while you work.
Create cryptographically strong passwords with customizable length, character types, and exclusions. Generate secure passwords resistant to brute-force and dictionary attacks.
Generate random UUID v4 identifiers for database keys, API resources, and distributed systems. Bulk generate with or without hyphens.
Generate SHA-256, SHA-512, MD5, and SHA-1 hashes from any text. Compare algorithm strengths and verify file integrity with our hash generator online.
Decode and inspect JSON Web Tokens — view header, payload, and signature. Understand JWT structure and verify claims with our JWT tools online.
Use our password generator to create unique passwords for every account. Aim for at least 16 characters with mixed case, digits, and symbols.
Use SHA-256 or SHA-512 for file integrity verification. For password storage, use bcrypt or Argon2 instead of plain SHA hashes.
JWT payloads are base64-encoded, not encrypted. Never store sensitive data in a JWT. Always validate signatures server-side before trusting a token.
Use UUID v4 for public-facing resource identifiers instead of sequential IDs to prevent enumeration attacks and information leakage.
Yes, all security and cryptography tools are completely free with no usage limits or sign-up required.
Absolutely. All processing — password generation, hashing, JWT decoding — happens locally in your browser. Nothing is sent to any server.
Yes, you can generate bcrypt hashes from any text using our dedicated bcrypt hash generator. Choose your salt rounds for the desired security level.