Free Security Tools — Hash, Encrypt, Decode

Security tasks are where uploading data to a random website is the last thing you want to do, and that is exactly why these tools run entirely in your browser. Decode a login token to see what it claims, generate a checksum to verify a download, create a strong password, look inside an SSL certificate, or encrypt a message with a key you control.

The tools are meant to help you understand and check things, not to replace a security review. The JWT decoder shows what is inside a token but does not verify its signature against your server. The password strength checker explains why a password is weak. The hash generator is useful for integrity checks, but it is not a way to store passwords. Each page says what the tool can and cannot tell you.

Passwords, keys and tokens you type here are processed locally and are not sent, stored or logged. For anything that protects real accounts, use fresh values rather than production secrets while you are learning, and clear the page when you are done.