Security Tools - Hash / Encryption / JWT / Passwords
23 toolsOnline security tools: MD5/SHA hash, HMAC, AES/RSA encryption, JWT decoder, TOTP, Bcrypt, password generator. Powered by Web Crypto API.
Hash & HMAC7
MD5 Hash
Online MD5 hash generator: enter text to get a 32-character MD5 hash. Computed locally in browser, data never sent.
SHA-1 Hash
Free online SHA-1 hash generator: paste text and instantly get the 40-character hex digest. Covers git commit IDs and legacy checksums. Computed locally in your browser, never uploaded.
Hash Generator
Online hash calculator: SHA-1, SHA-256, SHA-384, SHA-512. Powered by Web Crypto API, computed locally in browser.
SHA-512 Hash
Free online SHA-512 hash generator: paste text and instantly get the 128-character hex digest. Ideal for download verification and HS512 signing. Computed locally in your browser, never uploaded.
SM3 Hash Calculator
Online SM3 hash calculator: instant 256-bit digests for any text including Chinese and Emoji. SM3 is the Chinese national standard (GM/T 0004-2012), comparable to SHA-256. Runs locally in your browser.
Hash Verifier
Free online hash verifier tool. Supports MD5/SHA1/SHA256/SHA512 algorithms, text and file hash computation, one-click expected value comparison.
HMAC / HKDF Tool
Free online HMAC and HKDF tool: multi-algorithm HMAC (including HS256) plus RFC 5869 Extract+Expand. Hex/Base64 output; secrets never leave your browser.
Encryption6
AES Encrypt/Decrypt
Online AES-GCM encryption tool: PBKDF2 key derivation 256-bit. Processed locally in browser, ciphertext and password never sent.
RSA Encrypt/Decrypt
Free online RSA encryption and decryption tool. Supports 1024/2048/4096 bit key generation, public key encryption and private key decryption.
SM2 Encrypt/Sign
Online SM2 public-key tool: generate keypairs, encrypt/decrypt (C1C3C2 per GB/T 32918.4-2016), sign and verify. SM2 is a 256-bit ECC scheme, the Chinese alternative to RSA. Local-only, private keys never leave your device.
SM4 Encrypt/Decrypt
Online SM4 block cipher tool: ECB/CBC modes, PKCS#7 padding, random key generation with visibility toggle. 128-bit blocks per GB/T 32907, the Chinese national alternative to AES-128. Fully local, nothing uploaded.
PGP Tool
Free online PGP-style encryption: RSA-2048/4096 hybrid AES-256-GCM with public-key fingerprints and local key generation — runs in your browser (not GnuPG wire-compatible).
Bcrypt Hash Generator
Online Bcrypt password hashing tool: generate password hashes and verify passwords against hashes. Adjustable salt rounds, essential for authentication development.
Auth & Certificates8
JWT Decoder
Online JWT decoder with HS256 signature verification. Decode Header, Payload, Signature locally — hs256 online check without uploading your token.
JWT Generator
Free online JWT generator: mint HS256/HS384/HS512 locally with claim templates and exp/nbf shortcuts. Custom Header and Payload.
TOTP Generator
Free online TOTP generator with SHA-1/256/512, otpauth URI import/export, and countdown. Secrets stay in your browser.
Certificate Decoder
Free online X.509 certificate decoder. Paste a PEM certificate to view Subject, Issuer, validity period, public key algorithm, fingerprint, and more.
VIN Validator
Free online VIN validator per ISO 3779: verifies the 17-char alphabet and position-9 check digit, decodes WMI region, manufacturer, and model-year code. Runs locally.
HK ID Validator
Free online Hong Kong ID card validator: verifies the letter prefix, six digits, and parenthesized check character (weighted mod 11). Format validation, runs locally.
TW ID Validator
Free online Taiwan national ID validator: verifies the area letter (with special mappings), gender digit, and mod-10 check digit. Format validation, runs locally.
Macau ID Validator
Free online Macau resident ID validator: 8-digit format check with leading-digit category parsing (1/5/7). Honest format-level validation, runs locally.
Passwords2
Password Generator
Online secure password generator: customizable length, uppercase, lowercase, numbers, symbols. Uses crypto.getRandomValues for true randomness. Generated locally, never stored.
Password Strength Checker
Free online password strength checker that evaluates password security, provides improvement suggestions, and estimates crack time.