Crypto & Security
Hash, HMAC, AES, RSA, JWT, X.509, bcrypt, passwords — all client-side.
Hash Generator
Hash generator — compute MD5, SHA-1, SHA-256, SHA-384, and SHA-512 cryptographic hashes instantly in your browser. Uses the WebCrypto API for SHA hashes — no server required. Paste text or upload a file. Ideal for verifying checksums and generating fingerprints.
Open →HMAC Generator
Generate HMAC-SHA256, HMAC-SHA384, or HMAC-SHA512 signatures online. Enter your message and secret key — all computation runs client-side using the WebCrypto API. Used for webhook verification (GitHub, Stripe), API request signing, and JWT signature generation.
Open →JWT Decoder
JWT decoder — decode and inspect JSON Web Tokens instantly in your browser. View the decoded algorithm header, payload claims (sub, iat, exp, aud, iss), and expiration status. Flags expired tokens automatically. No signature verification — safe for debugging without exposing your secret key.
Open →Password Generator
Generate strong random passwords instantly using crypto.getRandomValues — never Math.random. Configurable length (8–128 chars), uppercase, lowercase, digits, symbols, and no-ambiguous mode. Copy with one click. 100% client-side.
Open →AES Encrypt / Decrypt
AES encryption online — encrypt and decrypt text with your choice of cipher: AES-256-GCM, AES-128-GCM, AES-256-CBC, AES-128-CBC, or AES-256-CTR, each with PBKDF2 key derivation. 100% client-side using the browser WebCrypto API — your plaintext and password never leave your device.
Open →Bcrypt Hash Generator
Bcrypt generator and verifier — hash passwords with real bcrypt (Blowfish) at cost factor 10, 12, or 14, and check whether a password matches an existing hash. Outputs $2b$ format and verifies $2a$/$2b$/$2y$ hashes from Node.js, PHP, Python, Ruby, and Go.
Open →SSH Key Generator
Generate RSA (2048/4096-bit) or Ed25519 SSH key pairs online. Keys are generated in your browser using the WebCrypto API — the private key never touches a server. Copy the OpenSSH public key straight into GitHub, GitLab, or authorized_keys; the private key exports as PKCS#8 PEM.
Open →CSR & Certificate Decoder
CSR decoder that parses a PEM certificate signing request or X.509 certificate and shows the subject DN, public key algorithm and size, subject alternative names, and signature algorithm. Certificates also show issuer, serial number and validity dates. Parsing happens in your browser.
Open →Certificate & Keystore Toolkit
Keystore viewer and certificate toolkit in your browser: inspect X.509 certificates and chains, convert between PEM and DER, list the contents of PKCS#12 and Java JKS keystores, and generate a key pair with a CSR. A Portecle-style workflow with nothing uploaded.
Open →JWT Generator
JWT generator that builds and signs a JSON Web Token with HS256, HS384 or HS512. Edit the payload as JSON, fill in standard claims like iss, sub, aud, iat and exp, and supply a secret. Signing uses the WebCrypto HMAC API in your browser — the secret is never transmitted.
Open →