Cryptography done in your browser. We never see your input or output. Verify the algorithm before relying on the result. For production secrets, use a hardware-backed key manager.

14 tools · hash, encrypt, sign, decode — Web Crypto API

Cryptography that runs in your browser. We see nothing.

Hash, encrypt, sign, decode — all via the browser's Web Crypto API. Your keys, secrets, passwords and JWTs are processed in this tab, not on a server somewhere.

SHA-256 · live

Input text

SHA-256

SHA-256 of your input · recomputed on every keystrokeno upload · no log · nothing leaves your tab

Hash JWT decode Password AES HMAC RSA keygen X.509 Secret scanner

14tools

Hash, encrypt, sign, decode — every primitive a security workflow needs.

0bytes uploaded

Web Crypto API runs in the page. We don't see inputs, outputs, or keys.

0accounts, telemetry, "AI security insights"

Not a security theatre. Cryptography you can verify.

Security toolkit

Hash, encrypt, sign, decode.

AES, bcrypt, HMAC, JWT, X.509, CSP and more. All client-side via Web Crypto API.

AES Encryption / Decryption BCrypt Hash & Verify File Checksum Calculator Hash & HMAC Generator Hash Generator HMAC Generator JWT Decoder JWT Generator & Signer Passphrase Generator Random Password Generator Random Token Generator RSA Key Pair Generator Secret & API Key Scanner X.509 Certificate Decoder

Verify the algorithm. Cryptography can be subtly wrong. Cross-check critical output against a second tool (e.g. openssl) before deploying. For production secrets, prefer a hardware-backed key manager (HSM, OS keychain) over browser-only generation.