Security & Hashing Tools Page
Cryptographic hash generators, password tools, and security utilities for data protection.
Argon2 Hash Generator & Verifier
Generate Argon2id, Argon2i and Argon2d hashes and verify passwords against existing hashes — entirely in your browser. Decode any Argon2 PHC string, check its parameters against OWASP minimums, and calibrate the iteration count for your hardware.
Bcrypt Hash Generator & Verifier
Generate secure bcrypt hashes and verify passwords against existing hashes. Bcrypt is a password hashing function with built-in salt and configurable cost factor for enhanced security.
BLAKE2b Hash Generator & Verifier
Generate and verify BLAKE2b hashes in your browser. Choose any output length from 1 to 64 bytes, switch on BLAKE2b's native keyed mode with a key up to 64 bytes, hash text in UTF-8/UTF-16/Latin-1/Windows-1252 or raw hex and base64, stream multi-gigabyte files, and compare the result against a b2sum checksum.
BLAKE2s Hash Generator & Verifier
Generate and verify BLAKE2s hashes in your browser. Choose any output length from 1 to 32 bytes, use BLAKE2s's native keyed mode with a key up to 32 bytes, hash text as UTF-8/UTF-16/Latin-1/Windows-1252 or raw hex and base64, stream large files, and compare against an expected digest.
BLAKE3 Hash Generator & Verifier
Generate and verify BLAKE3 hashes in your browser. Pick any extendable output length, switch on keyed_hash mode with a 32-byte key, hash text as UTF-8/UTF-16/Latin-1/Windows-1252 or raw hex and base64, stream large files with live progress, and compare against a b3sum checksum.
CSP Generator & Analyzer
Paste a Content-Security-Policy header and get a graded audit: every directive explained in plain English, findings ranked critical to info with the exact fix, and the traps that silently neutralise a policy — live 'unsafe-inline', missing base-uri, scheme-only script sources. Then build a new policy from strict presets, generate nonces and inline-script SHA-256 hashes, and copy it out as an nginx, Apache, Next.js, Cloudflare Pages, Express or snippet.
Hash Identifier & Analyzer
Identify and analyze hash types from hash strings. Supports MD5, SHA-1, SHA-2, SHA-3, bcrypt, Argon2, scrypt, PBKDF2, and more. Analyzes hash format, length, and characteristics to determine the most likely hashing algorithm used.
HMAC Generator / Verifier (MD5, SHA‑1, SHA‑2, SHA3‑256)
Generate and verify HMAC (Hash-based Message Authentication Code) tags with MD5, SHA-1, SHA-256, SHA-384, SHA-512 or SHA3-256. Decode the secret key as UTF-8 text, hex or base64, and output the tag as hex, base64 or base64url. Runs entirely in your browser — built for API request signing, webhook signature verification and JWT debugging.
Key Pair Generator
Generate cryptographically-secure Ed25519, ECDSA, and RSA key pairs entirely in your browser. Export real OpenSSH private keys (openssh-key-v1), PKCS#8/SPKI PEM with optional PBES2 passphrase protection, or JWK for JWKS endpoints — complete with SHA256/MD5 fingerprints, OpenSSH randomart, and a sign-and-verify check that proves the two halves match. Keys are generated via the Web Crypto API, the same primitives browsers use for TLS, and never leave your device.
MD5 Hash Generator & Verifier
Generate MD5 hashes from text or files and verify them against an expected checksum. Streams large files in your browser, supports UTF-8/UTF-16/Latin-1/Windows-1252 and hex/base64 input, HMAC-MD5, and hex or base64 output. MD5 is collision-broken: use it for checksums and legacy compatibility only.
PBKDF2 Hash Generator & Verifier
Derive PBKDF2 keys with an explicit salt encoding (hex, base64 or UTF-8 text) and verify passwords against real stored hashes — Django, passlib/PHC, Werkzeug, hash:salt or a bare digest. Output as hex, base64, a Django string or a PHC string, with a live benchmark and the OWASP iteration floors enforced in the UI. Everything runs in your browser.
Random Number Generator
Generate random numbers with customizable ranges, quantities, and options. Perfect for games, testing, sampling, and mathematical applications.
Random Password Generator
Generate secure, customizable passwords with options for length, character sets, and complexity. Create strong passwords for accounts, applications, and security purposes.
Scrypt Hash Generator & Verifier
Generate secure scrypt hashes and verify passwords against existing hashes. Scrypt is a memory-hard password hashing function designed to resist hardware-based attacks with configurable CPU/memory cost parameters.
SHA-1 Hash Generator & Verifier
Generate SHA-1 hashes from text or files and verify them against an expected checksum. Streams large files in your browser, supports UTF-8/UTF-16/Latin-1/Windows-1252 and hex/base64 input, HMAC-SHA1, and hex or base64 output. SHA-1 is collision-broken: use it for legacy compatibility and checksums only.
SHA-256 Hash Generator & Verifier
Generate SHA-256 hashes from text or files and verify them against an expected checksum. Streams large files in your browser, supports UTF-8/UTF-16/Latin-1/Windows-1252 and hex/base64 input, HMAC-SHA256, and hex or base64 output.
SHA-3 / Keccak Hash Generator & Verifier
Generate and verify SHA-3 and Keccak hashes in all four lengths (224/256/384/512) and see exactly why SHA3-256 and Keccak-256 differ. Hashes text or multi-gigabyte files entirely in your browser, supports UTF-8/UTF-16/Latin-1/Windows-1252 and hex/base64 input, HMAC, and hex or base64 output.
SHA-512 Hash Generator & Verifier
Generate SHA-512 hashes from text or files and verify them against an expected checksum. Streams large files in your browser, supports UTF-8/UTF-16/Latin-1/Windows-1252 and hex/base64 input, HMAC-SHA512, and hex or base64 output.
UUID Generator & Verifier
Generate and verify UUIDs v1, v4, v5, and v7. Create time-based, random, name-based, and sortable UUIDs for databases, APIs, and distributed systems with validation tools.