17 Free Tools

Cryptography & Security Tools


Generate hashes, forge strong passwords, encrypt text, and work with JWTs and one-time codes — security utilities that run entirely on your device.

Security work needs tools you can trust not to leak the very thing you're protecting. That rules out anything that quietly sends your password or secret to a server.

Every tool in this category runs client-side: hashing, encryption, and key generation all happen in your browser, and nothing you type is transmitted.

Choose a tool below to hash, encrypt, generate, or decode.

Cryptography & Security

Argon2 Hash Generator

Generate and verify Argon2 hashes with configurable parameters (memory, time, parallelism). Supports Argon2id, Argon2i, and Argon2d algorithms. Winner of Password Hashing Competition

Cryptography & Security

Bcrypt Hash Generator

Generate secure bcrypt password hashes with adjustable cost factor. Includes password verification and salt extraction.

Cryptography & Security

HMAC Generator

Generate and verify HMAC (Hash-based Message Authentication Code) for message authentication and integrity

Cryptography & Security

JWT Decoder

Decode and analyze JWT (JSON Web Token) structure, claims, and expiration

Cryptography & Security

MD5 File Checksum

Easily calculate the MD5 hash of any file instantly and directly on your browser. Avoid security flaw of a file, for free.

Cryptography & Security

MD5 Hash Decrypter

MD5 Hash Decrypter is a tool that automatically decrypts MD5 hash using dictionary of more than 1 trillion potential passwords.

Cryptography & Security

MD5 Hash Generator

Encrypt your password, credit card data, or any sensitive information using MD5 Hash Generator, all for free!

Cryptography & Security

SHA-1 Hash Generator

Generate SHA-1 hashes for legacy compatibility. ⚠️ SHA-1 is deprecated - use SHA-256 or higher for security

Cryptography & Security

SHA-384 Hash Generator

Generate SHA-384 cryptographic hashes for text and files with support for multiple algorithms

Cryptography & Security

SHA-256 Hash Generator

Generate SHA-256 hash from any string instantly on the fly within less than a second with the free SHA256 Hash Generator.

Cryptography & Security

SHA-512 Hash Generator

The SHA512 Hash Generator is a great tool to instantly generate unique 512-bit (32-byte) signature for any text for free.

Cryptography & Security

Strong Password Generator

Gerate a very strong password only with a few clicks with the free online Strong Password Generator.

Cryptography & Security

AES Text Encryption

Free browser-based AES text encryption tool. Encrypt and decrypt messages with a passphrase using AES-GCM 256-bit and PBKDF2, entirely client-side and private.

Cryptography & Security

Password Strength Checker

Free browser-based password strength checker. Test any password for strength, entropy, and time to crack with a live meter and tips, analyzed 100% privately on your device.

Cryptography & Security

htpasswd Generator

Free browser-based htpasswd generator. Create Apache and nginx .htpasswd entries with bcrypt, SHA-1, or plaintext, then copy or download the file.

Cryptography & Security

TOTP Code Generator

Free browser-based TOTP code generator. Turn a Base32 secret into time-based one-time passwords (2FA codes) with a live countdown, entirely client-side and private.

Cryptography & Security

JWT Generator

Free browser-based JWT generator. Build and sign JSON Web Tokens with HS256, HS384, or HS512 using the Web Crypto API, entirely client-side and private.

Which hash should I use?

It depends on the job. For file integrity and checksums, a fast hash is fine — the SHA-256 Hash Generator is the modern default, and the MD5 Hash Generator remains useful for legacy compatibility.

For storing passwords, speed is the enemy. Use a deliberately slow algorithm like the Bcrypt Hash Generator or Argon2, which are designed to resist brute-force attacks.

Passwords and secrets

A strong password is long and random. The Strong Password Generator builds one to your length and character rules, and the Password Strength Checker shows how a candidate holds up.

For text you need to keep private, AES Text Encryption locks it behind a passphrase that only you hold.

Tokens and one-time codes

Working with authentication? The JWT Decoder reveals a token's header and payload without verifying blindly, and the TOTP Code Generator produces the same six-digit codes an authenticator app would.

Because it all runs locally, you can safely paste real secrets — they never travel across the network.

Good to know

Frequently Asked Questions

Do these tools send my passwords or secrets anywhere?

No. Every tool in this category runs entirely in your browser. Hashing, encryption, and generation happen on your device, and nothing you enter is transmitted or stored.

Which hash is best for storing passwords?

Use a slow, salted algorithm like bcrypt or Argon2. Fast hashes such as MD5 and SHA-256 are meant for checksums and integrity, not password storage.

Is AES encryption here secure enough for real use?

It uses standard AES with a key derived from your passphrase. Security depends on choosing a strong, unique passphrase and keeping it safe.

Can I decode a JWT without the secret key?

Yes. The JWT Decoder reads the header and payload, which are only Base64-encoded. Verifying the signature, however, requires the secret.