Security & Hashing Tools
From quick hash checks to AES encryption, these security tools handle everyday cryptographic tasks without ever sending your data to a server. Perfect for audits, testing, and secure credential generation.
- SHA1 Hash GeneratorGenerate SHA-1 hash of any text string.
- SHA256 Generator OnlineSHA256 online — generate a SHA-256 cryptographic hash of any text or string instantly in your browser. Free SHA256 generator and SHA-256 hash checker — no data sent to servers.
- SHA512 Hash GeneratorGenerate SHA-512 cryptographic hash of text.
- HMAC GeneratorGenerate HMAC signatures using SHA-256 or other algorithms.
- AES EncryptorEncrypt any text with AES-256-CBC using a random or custom hex key — outputs IV-embedded Base64 or Hex ciphertext.
- AES DecryptorDecrypt AES-256-CBC ciphertext back to plaintext using your secret hex key — supports Base64 and Hex ciphertext.
- Password List GeneratorPassword list generator — create a bulk list of random passwords with custom length and character sets. Also used as a password list maker, password list creator, and password generator list. All passwords generated locally in your browser, never transmitted.
- Bcrypt Hash GeneratorGenerate and verify bcrypt password hashes with configurable cost factor (rounds). All hashing runs in your browser using bcryptjs — your password is never transmitted.
- TOTP 2FA Code GeneratorGenerate live TOTP 6-digit codes from a base32 secret key — same algorithm as Google Authenticator and Authy. Uses WebCrypto HMAC-SHA1. All computation in the browser.
- Password Strength CheckerCheck password strength with entropy-based scoring, time-to-crack estimation, and detailed criteria feedback. Checks for common passwords, repeats, and sequences. Runs entirely in browser.
- JWT Generator (HS256)Create and sign JSON Web Tokens with a custom header, payload, and HMAC secret using WebCrypto. Generates real HS256 JWTs — colour-coded header, payload, and signature. Browser-only.
- File Hash CalculatorDrag-drop any file to calculate its SHA-256, SHA-512, SHA-1, and MD5 hash instantly. Verify a downloaded file against a published checksum. File never leaves your browser.