Content is loading…
Passwords, hashes, encryption, ciphers — all client-side.
The Security category on Toolsy provides free, browser-based utilities designed to help developers, system administrators, and privacy-conscious users protect data and verify digital credentials. These tools enable users to generate strong credentials, analyze cryptographic hashes, inspect certificates, and encode sensitive text without installing software or creating an account.
24 tools
Generate strong, customizable secure passwords instantly.
Generate MD5, SHA-1, SHA-256, SHA-512 hashes from text.
Encode and decode text with ROT13, Caesar, Atbash, and Vigenère ciphers.
Check password strength: entropy, crack time, patterns, and breach check.
AES-256-GCM encrypt and decrypt text with a passphrase — runs in your browser.
Generate HMAC-SHA256/512 signatures for API authentication and webhooks.
Build and sign JWTs with HS256/384/512. Verify signatures. Runs in your browser.
Generate live TOTP/2FA codes from a base32 secret. Scan QR with any authenticator.
Compute SHA-1/256/384/512 of any file and verify integrity — 100% browser-based.
Hash passwords with bcrypt and verify hashes — adjustable cost factor, runs locally.
Build Content Security Policy headers visually with live preview and presets.
Browser-side openssl rand replacement. Hex, base64, base64url, and alphanumeric secrets with the equivalent terminal command.
Check SSL/TLS certificate details and expiry for any domain.
Inspect PEM certificates, keys, and CSRs in your browser.
Hide encrypted text inside any PNG using LSB steganography. Decode later.
Check if a password has leaked in a data breach — hashed locally, never sent in full.
Generate an Ed25519 or RSA SSH key pair entirely in your browser.
Generate an RFC 9116 security.txt file for responsible vulnerability disclosure.
Create SRI integrity="sha384-..." hashes for scripts and stylesheets.
Hide a secret message inside normal text using invisible characters — encode & decode.
Spot look-alike (homoglyph) characters used in phishing & get a safe version.
Paste a hash to identify its likely type (MD5, SHA, bcrypt, NTLM & more).
Generate strong, memorable word-based passphrases with an entropy meter.
Generate PGP keys, then encrypt, decrypt, sign and verify messages entirely in your browser.
Generate cryptographically secure passwords, passphrases, and multi-factor authentication tokens to protect user accounts and administrative logins.
Secure sensitive text strings, generate secure hashes, and verify data integrity for files and API payloads.
Build secure HTTP headers, configure security text files, and generate subresource integrity hashes to defend web applications against common vulnerabilities.
Create and inspect SSH key pairs, JSON Web Tokens, and SSL certificates for secure server communication and authentication.