Crypto & Security Tools

Free cryptography and security tools — hash text with SHA, MD5 and HMAC, encrypt with AES, generate TOTP two-factor codes, check password strength, and create secure random tokens, all in your browser.

md5

MD5 Hash Generator

Compute the 32-character MD5 hash of any text, updating live as you type.

⌥

HMAC Generator

Generate an HMAC signature for a message using a secret key and chosen hash.

🔒

AES Text Encryption

Encrypt and decrypt text with a passphrase using AES-GCM and PBKDF2.

⧖

TOTP / 2FA Code

Generate a time-based one-time passcode from a Base32 secret, refreshed every second.

▓

Password Strength Meter

Estimate password entropy, a strength rating and a rough crack-time estimate.

🔑

API Token Generator

Generate secure random tokens or API keys in hex, base62 or base64url.

✓

Luhn / Card Validator

Check a number with the Luhn algorithm and detect the card brand by prefix.

R47

ROT47 Cipher

Encode or decode text with the self-inverse ROT47 cipher, updating live as you type.

⊕

XOR Cipher

XOR-encrypt a message with a repeating key, producing hex output you can decrypt back.

Vig

Vigenère Cipher

Encrypt or decrypt text with the classic keyword-based Vigenère cipher.

Base58 Encoder/Decoder

Encode and decode text using the Bitcoin Base58 alphabet, with leading-zero handling.

JWT+

JWT Generator

Create a signed HS256 JSON Web Token from a JSON payload and a secret.

🎲

Random Bytes Generator

Generate cryptographically secure random bytes as hex, base64, a decimal array or binary.

🕵️

Image Steganography Tool

Hide secret text inside an image using LSB steganography, or reveal a hidden message. Runs 100% in your browser, nothing is uploaded.

🔐

Bcrypt Hash Generator & Verifier

Generate a bcrypt password hash with a selectable cost factor, or verify a plaintext password against an existing $2b$ hash. Runs fully in your browser.

🛡️

Argon2 Password Hash Generator & Verifier

Compute an Argon2id/i/d password hash with configurable memory, iterations, and parallelism, or verify a password against a PHC-encoded hash. Client-side.

🧂