Security
JWT decoding, hashing and security header analysis.
JWT Decoder
Decode a JWT's header and payload, and check its expiration status.
Security Header Analyzer
Check which security headers a site sends, with plain-language explanations.
UUID Generator
Generate RFC 4122 version 4 UUIDs, individually or in bulk.
Hash Generator
Generate SHA-256, SHA-384 or SHA-512 hashes from text.
Password Generator
Generate cryptographically random passwords with configurable length and character sets.
Nginx Config Security Analyzer
Audit nginx.conf for security vulnerabilities, missing HSTS/CSP headers, and weak SSL protocols.
WordPress & Apache Security .htaccess Generator
Build production-hardened .htaccess files: Force HTTPS, 301/302 redirects, IP blocking, WordPress shields, basic auth, and security headers.
SSH Key Pair Generator
Generate Ed25519 or RSA 4096-bit SSH key pairs locally in your browser.
CORS Header Generator & Simulator
Generate CORS headers for Express, NestJS, Nginx, API Gateway, and test pre-flights.
Content Security Policy (CSP) Generator & Linter
Generate and audit Content Security Policy headers for script-src, style-src, and frame-ancestors.
Secure Cookie & Set-Cookie Header Generator
Generate Set-Cookie headers for Express, NestJS, Next.js, and audit HttpOnly/SameSite security.
X.509 SSL/TLS Certificate & PEM Decoder
Decode PEM-encoded X.509 SSL/TLS certificates, CSRs, and public keys.
RFC 9116 security.txt File Generator
Generate standardized RFC 9116 vulnerability disclosure security.txt files.
Unicode & BiDi Security Scanner
Expose invisible characters, bidirectional controls, mixed scripts, and common Unicode look-alikes.
OAuth DPoP Proof Debugger
Decode and validate RFC 9449 DPoP proofs, request binding, access-token hashes, and signatures.