Security & Auth
23 tools — free, private, runs in your browser
Hash generators, JWT debugger, SAML decoder, OIDC builder, encryption, TOTP, password analysis, and credential tools - all client-side.
TLS Certificate Checker
Check TLS/SSL certificate expiry, issuer, and security configuration. Paste openssl output for instant analysis.
SOC 2 Readiness Checklist
Interactive checklist covering all 5 Trust Service Criteria with linked tools for each control.
Security Policy Generator
Generate password, access control, and incident response policies for SOC 2 compliance.
Security Headers Analyzer
Check HSTS, CSP, X-Frame-Options and more on any URL. Graded A-F with fix recommendations.
CSP Generator
Build Content-Security-Policy headers visually. Configure directives and copy the header.
CSP Evaluator
Analyze a CSP header for weaknesses: unsafe-inline, wildcards, missing directives, bypass risks.
CORS Tester
Test cross-origin requests from your browser. See Access-Control-Allow-Origin, methods and headers.
Cookie Security Analyzer
Check Set-Cookie headers for Secure, HttpOnly, SameSite, prefixes and domain scope.
JWT & Auth Toolkit
Complete auth debugging suite: decode and verify JWTs, inspect claims, build OIDC URLs, decode SAML, generate tokens. All client-side.
SAML Request & Response Decoder
Decode SAML AuthnRequest and Response messages - base64 plus raw-deflate - with pretty-printed XML. Essential for Okta, Entra ID and Shibboleth debugging. 100% client-side.
OIDC Authorization URL & PKCE Generator
Build OAuth 2.0 / OIDC authorize URLs with state, nonce and S256 PKCE code challenges. Works with Okta, Auth0, Entra ID, Keycloak.
JWT Debugger
Decode and inspect JWT tokens instantly.
Hash Text
Generate Argon2id, bcrypt, PBKDF2, MD5, SHA-1, SHA-256, SHA-384, SHA-512, BLAKE2b, and Poseidon hashes online. 100% client-side Argon2id password hashing for maximum security.
Bcrypt
Generate and verify Bcrypt password hashes.
Encrypt/Decrypt
Encrypt and decrypt text using various algorithms.
HMAC Generator
Generate HMAC hash codes with various algorithms.
RSA Key Pair
Generate RSA public/private key pairs.
Password Strength
Analyze password strength and get improvement suggestions.
TOTP Generator
Generate TOTP codes from secrets. Privacy-first tool.
PDF Signature Checker
Check and validate digital signatures in PDF files. Privacy-first tool.
Token Generator
Generate secure random tokens with customizable length and character sets.
Basic Auth Generator
Generate HTTP Basic Authentication headers.
String Obfuscator
Obfuscate strings to hide sensitive data.