Security
JWT decoding, hashing and security header analysis.
JWT Decoder
Decode a JWT's header and payload, and check its expiration status.
Security Header Analyzer
Check which security headers a site sends, with plain-language explanations.
UUID Generator
Generate RFC 4122 version 4 UUIDs, individually or in bulk.
Hash Generator
Generate SHA-256, SHA-384 or SHA-512 hashes from text.
Password Generator
Generate cryptographically random passwords with configurable length and character sets.
Nginx Config Security Analyzer
Audit nginx.conf for security vulnerabilities, missing HSTS/CSP headers, and weak SSL protocols.
WordPress Security .htaccess Generator
Generate production-hardened WordPress .htaccess rules to protect wp-config and block XML-RPC.
SSH Key Pair Generator
Generate Ed25519 or RSA 4096-bit SSH key pairs locally in your browser.
CORS Header Generator & Simulator
Generate CORS headers for Express, NestJS, Nginx, API Gateway, and test pre-flights.
Content Security Policy (CSP) Generator & Linter
Generate and audit Content Security Policy headers for script-src, style-src, and frame-ancestors.
Secure Cookie & Set-Cookie Header Generator
Generate Set-Cookie headers for Express, NestJS, Next.js, and audit HttpOnly/SameSite security.