Argon2 Hash Generator
Generate and verify Argon2 hashes with configurable parameters (memory, time, parallelism). Supports Argon2id, Argon2i, and Argon2d algorithms. Winner of Password Hashing Competition
Generate hashes, forge strong passwords, encrypt text, and work with JWTs and one-time codes — security utilities that run entirely on your device.
Security work needs tools you can trust not to leak the very thing you're protecting. That rules out anything that quietly sends your password or secret to a server.
Every tool in this category runs client-side: hashing, encryption, and key generation all happen in your browser, and nothing you type is transmitted.
Choose a tool below to hash, encrypt, generate, or decode.
Generate and verify Argon2 hashes with configurable parameters (memory, time, parallelism). Supports Argon2id, Argon2i, and Argon2d algorithms. Winner of Password Hashing Competition
Generate secure bcrypt password hashes with adjustable cost factor. Includes password verification and salt extraction.
Generate and verify HMAC (Hash-based Message Authentication Code) for message authentication and integrity
Decode and analyze JWT (JSON Web Token) structure, claims, and expiration
Easily calculate the MD5 hash of any file instantly and directly on your browser. Avoid security flaw of a file, for free.
MD5 Hash Decrypter is a tool that automatically decrypts MD5 hash using dictionary of more than 1 trillion potential passwords.
Encrypt your password, credit card data, or any sensitive information using MD5 Hash Generator, all for free!
Generate SHA-1 hashes for legacy compatibility. ⚠︠SHA-1 is deprecated - use SHA-256 or higher for security
Generate SHA-384 cryptographic hashes for text and files with support for multiple algorithms
Generate SHA-256 hash from any string instantly on the fly within less than a second with the free SHA256 Hash Generator.
The SHA512 Hash Generator is a great tool to instantly generate unique 512-bit (32-byte) signature for any text for free.
Gerate a very strong password only with a few clicks with the free online Strong Password Generator.
Free browser-based AES text encryption tool. Encrypt and decrypt messages with a passphrase using AES-GCM 256-bit and PBKDF2, entirely client-side and private.
Free browser-based password strength checker. Test any password for strength, entropy, and time to crack with a live meter and tips, analyzed 100% privately on your device.
Free browser-based htpasswd generator. Create Apache and nginx .htpasswd entries with bcrypt, SHA-1, or plaintext, then copy or download the file.
Free browser-based TOTP code generator. Turn a Base32 secret into time-based one-time passwords (2FA codes) with a live countdown, entirely client-side and private.
Free browser-based JWT generator. Build and sign JSON Web Tokens with HS256, HS384, or HS512 using the Web Crypto API, entirely client-side and private.
It depends on the job. For file integrity and checksums, a fast hash is fine — the SHA-256 Hash Generator is the modern default, and the MD5 Hash Generator remains useful for legacy compatibility.
For storing passwords, speed is the enemy. Use a deliberately slow algorithm like the Bcrypt Hash Generator or Argon2, which are designed to resist brute-force attacks.
A strong password is long and random. The Strong Password Generator builds one to your length and character rules, and the Password Strength Checker shows how a candidate holds up.
For text you need to keep private, AES Text Encryption locks it behind a passphrase that only you hold.
Working with authentication? The JWT Decoder reveals a token's header and payload without verifying blindly, and the TOTP Code Generator produces the same six-digit codes an authenticator app would.
Because it all runs locally, you can safely paste real secrets — they never travel across the network.
No. Every tool in this category runs entirely in your browser. Hashing, encryption, and generation happen on your device, and nothing you enter is transmitted or stored.
Use a slow, salted algorithm like bcrypt or Argon2. Fast hashes such as MD5 and SHA-256 are meant for checksums and integrity, not password storage.
It uses standard AES with a key derived from your passphrase. Security depends on choosing a strong, unique passphrase and keeping it safe.
Yes. The JWT Decoder reads the header and payload, which are only Base64-encoded. Verifying the signature, however, requires the secret.