Free Online Security Tools
Use defensive browser-based tools for passwords, authentication, hashing, integrity, encryption, privacy, security headers, policies, cookies, tokens, and safe encoding.
Choose a security workspace
Each category groups defensive tools by the security task they complete.
Password & Authentication Tools
Create, evaluate, and manage strong authentication secrets without sending them to a server.
Hash & Integrity Tools
Generate cryptographic digests, verify checksums, create HMAC values, and build SRI attributes.
Encryption & Privacy Tools
Encrypt text and files locally, redact sensitive data, and create high-entropy random secrets.
Web Security Tools
Review security headers, build and inspect CSP policies, check cookies, and find mixed content.
Token & Encoding Tools
Decode and verify supported JWT signatures, process Base64 data, and safely encode URL values.
Explore category →Free Online Security Tools
Use defensive browser-based tools for passwords, authentication, hashing, integrity, encryption, privacy, security headers, policies, cookies, tokens, and safe encoding.
Password Strength Checker
Evaluate password length, character variety, predictable patterns, estimated entropy, and practical improvement opportunities entirely in the browser.
Use Tool →Secure Password Generator
Generate one or more cryptographically random passwords with controllable length, character sets, ambiguous-character filtering, and custom symbols.
Use Tool →Passphrase Generator
Create memorable multi-word passphrases from a built-in word bank with cryptographically random word selection and optional capitalization, numbers, and symbols.
Use Tool →TOTP Authenticator Code Generator
Generate RFC-style time-based one-time passwords from a Base32 secret with configurable digits, period, and supported HMAC algorithms.
Use Tool →Secure PIN Generator
Generate cryptographically random numeric PINs with configurable length, quantity, repeat filtering, and predictable-sequence rejection.
Use Tool →Text Hash Generator
Create SHA-1, SHA-256, SHA-384, or SHA-512 digests from UTF-8 text and display the result as hexadecimal, Base64, or Base64URL.
Use Tool →File Checksum Generator
Calculate SHA checksums for local files without uploading the file, with hexadecimal, Base64, and Base64URL output options.
Use Tool →Checksum Verifier
Compare an expected SHA checksum with a locally calculated checksum from text or a selected file and report an exact match or mismatch.
Use Tool →HMAC Generator
Generate keyed HMAC authentication codes using SHA-256, SHA-384, or SHA-512 with UTF-8, hexadecimal, or Base64 key input.
Use Tool →Subresource Integrity Hash Generator
Generate SHA-256, SHA-384, and SHA-512 Subresource Integrity values from a local file or pasted resource content.
Use Tool →Text Encryptor & Decryptor
Encrypt and decrypt text locally with AES-256-GCM, a password-derived key, random salt, random IV, and authenticated ciphertext packaging.
Use Tool →File Encryptor & Decryptor
Encrypt or decrypt a local file with AES-256-GCM and PBKDF2 while keeping the file inside the browser and producing a downloadable result.
Use Tool →Sensitive Data Redaction Tool
Find and redact common email addresses, phone numbers, IPv4 addresses, payment-card candidates, URLs, and bearer-style tokens from pasted text.
Use Tool →Secure Random Secret Generator
Generate high-entropy random byte strings for application secrets, tokens, salts, test keys, and configuration values in several encodings.
Use Tool →HTTP Security Headers Analyzer
Analyze pasted HTTP response headers for common browser security controls, policy quality, unsafe disclosures, and missing protections.
Use Tool →Content Security Policy Builder
Build a structured Content-Security-Policy header from common source directives and optional hardening controls.
Use Tool →Content Security Policy Analyzer
Parse and review a Content Security Policy for missing directives, broad wildcards, unsafe keywords, weak fallbacks, and common hardening gaps.
Use Tool →Cookie Security Checker
Inspect one or more Set-Cookie headers for Secure, HttpOnly, SameSite, prefix requirements, scope, expiration, and cross-site behavior.
Use Tool →Mixed Content Checker
Scan pasted HTML and CSS-like content for insecure HTTP resource references that can cause mixed-content warnings or blocking on HTTPS pages.
Use Tool →JWT Decoder & HMAC Verifier
Decode JWT header and payload claims, inspect time-based fields, identify algorithms, and optionally verify HS256, HS384, or HS512 signatures with a shared secret.
Use Tool →Base64 & Base64URL Encoder Decoder
Encode UTF-8 text to Base64 or Base64URL and decode either format with strict validation and readable UTF-8 error handling.
Use Tool →URL Encoder & Decoder
Encode or decode URL components, query values, and complete HTTP or HTTPS URLs with strict browser-side percent processing.
Use Tool ?