Crypto

Decode JSON Web Tokens instantly. Inspect claims, header, and expiration times.

Create, sign, and verify HMAC JSON Web Tokens (HS256, HS384, HS512) via Web Crypto API.

Encode & decode Base64 with full UTF-8 and URL-safe support. Instant 2-way swap.

Decode Base64 strings to images, inspect dimensions and file size, and download binary images.

Decode SSL/TLS X.509 certificates and CSRs. Inspect SANs, validity, issuer, and SHA-256 fingerprints.

MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512 and HMAC, client-side and instant.

Percent-encode or decode strings and full URLs. Component mode for query values, Full URI mode preserves :/?#[]@.

Generate secure random passwords and alphanumeric tokens with crypto.getRandomValues and an entropy-based strength meter.

Generate RSA-OAEP or RSASSA-PKCS1-v1_5 key pairs (2048/3072/4096-bit) as PEM. Pure Web Crypto, nothing persisted.

Hash passwords with bcrypt at a configurable cost factor, or verify a password against an existing hash.

Compute HMAC-SHA1, HMAC-SHA256, HMAC-SHA384, and HMAC-SHA512 via Web Crypto with UTF-8, hex, and Base64 keys and outputs.

Evaluate password entropy, pattern penalties (walks, repeats, l33t roots, years), and online/offline crack-time estimates.

Translate text to Morse code and decode signals back to text with PARIS Web Audio beeps, speed slider, and ITU reference chart.

Encrypt, decrypt, and crack classical ciphers: Caesar shift (-25 to +25), ROT13, ROT47, Vigenère with keyword, Atbash, and 25-shift brute force.

Encode and decode Base32 (RFC 4648), Base58 (Bitcoin/IPFS), Ascii85 (Adobe/Git), Punycode IDN domains, and Unix Uuencode.

Conceal secret messages invisibly inside plain text via Zero-Width Unicode or inside PNG pixels via Canvas LSB steganography.

Compute IEEE CRC-32, Castagnoli CRC-32C, CRC-16-CCITT, CRC-16-Modbus, and Adler-32 with live checksum verification.