Security & Privacy

Generate a strong, random password locally.

Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes from any text, each shown separately or copied together as one combined block.

Lock a PDF with a password so only people who know it can open it, and choose whether they can print, copy or edit. Private and in your browser.

Remove the password or the print, copy and edit limits from a PDF you own, when you know the password. Private and in your browser.

Black out names, numbers and other private details in a PDF. Redacted pages are flattened so the hidden text is truly gone. Private and in your browser.

Strip location and camera metadata from a photo before sharing it.

Check how strong a password is and how long it would take to crack.

Break down an email's raw headers to trace its path and check for spoofing.

Check a file's true type, size and metadata.

Create a signed JSON Web Token (HS256, HS384 or HS512) from your own payload and secret, with optional issued-at and expiry.

Paste a JWT to see when it was issued, when it expires and how much time is left — without sending it anywhere.

Build an OAuth 2.0 authorization URL with client ID, redirect, scopes, a random state and optional PKCE challenge.

Create the HTTP Basic Authorization header from a username and password, plus cURL and fetch snippets.

Generate cryptographically random bearer tokens in Base64URL or hex, ready for an Authorization header.

Generate secure random API keys with a prefix like sk_live_, a chosen length and character set.

Generate strong random secrets (128 to 512 bits) in hex and Base64 for JWT signing, sessions and webhooks.

Compute an HMAC (SHA-256, SHA-384, SHA-512 or SHA-1) of a message with your secret key, in hex and Base64.

Create a bcrypt password hash with your chosen cost factor, or check a password against an existing bcrypt hash.

Create an Argon2id password hash with your chosen memory, iterations and parallelism, or verify a password against one.

Generate SHA-1, SHA-256, SHA-384 and SHA-512 hashes of any text at once.

Generate the MD5 hash of any text, for checksums and cache keys.

Generate an RSA public and private key pair (2048, 3072 or 4096 bits) as PEM files, in your browser.

Generate an Ed25519 or RSA SSH key pair with the public key line and fingerprint, in your browser.

Generate a certificate signing request (CSR) and RSA private key for an SSL certificate, with subject alternative names.

Estimate a password's strength in bits and how long it would take to guess, with warnings for common patterns.