Security & Cryptography

Generate random passwords in your browser using the Web Crypto API. Customize character sets, exclude similar characters, and view theoretical entropy estimates.

Strongly encrypts (AES-GCM-256) or decrypts text on the browser using the specified password as a key.

Generates hash values ​​such as MD5, SHA-1, SHA-256, SHA-512, etc. from input text in real time.

Securely generate RSA key pairs (1024/2048/4096 bits) used for encryption and digital signatures on your browser.

Calculate the hash value (SHA-256/SHA-1/MD5) of the uploaded file and verify whether it matches the published value.

Secret text is embedded and extracted in the pixel data of an image (PNG) as extremely small noise that cannot be discerned by the human eye.

Generates and displays an OTP code for two-factor authentication that is updated every 30 seconds from a Google Authenticator-compatible secret key (Base32).

Encodes and decodes strings in real time to Base32 or Base58 format used by Bitcoin.

Converts regular Base64 strings and text to Base64 format that can be safely included in URL arguments (parameters).

Verifies whether the credit card number is compatible with the Luhn algorithm and automatically determines compatible card brands.

We measure the complexity and entropy of passwords and verify their resistance to cracking by offline and online attacks.

Visually experience the browser standard Web Crypto API and automatically generate encryption/signature JS code.

A detailed report on the current cryptographic connection method (TLS version, cipher suite, etc.) and communication protocol (HTTP/2/3).

Uses a DoH (DNS over HTTPS) server to resolve and display the DNS records (A, AAAA, MX, CNAME, TXT, NS, CAA) of the specified host.

Extracts GPS metadata from JPEG photos locally and sends coordinates to OpenStreetMap only when you explicitly open the map. Clearing the GPS IFD removes location tags, but does not anonymize all other EXIF metadata.

Analyzes URL structure locally using heuristics, with an optional opt-in HEAD request to inspect redirects. External reputation links pass either the full URL or domain depending on the service. Does not provide a definitive safety verdict.

We compare communication standards from SSL 2.0 to TLS 1.3 and determine vulnerability information and cipher suite strength.

Loads the SSL/TLS digital certificate (PEM/Base64 format) locally and decodes and analyzes the CN, organization, expiration date, serial, and hash value.

Attempts sequential HTTP fetch requests with a 1-second timeout. Cannot conclusively determine host reachability or TCP open/closed state because browser, CORS, and mixed-content restrictions affect results.

You can list, search, add, edit, and delete the browser's LocalStorage, SessionStorage, and Cookie values.

Queries external geolocation APIs (FreeIPAPI or ipapi.co) upon manual request and displays estimated regional coordinates on OpenStreetMap. Location results reflect network-level estimates rather than an individual's physical location.

Securely generate API keys, UUIDs, and private key tokens in bulk using a cryptographically secure random number generator (CSPRNG).

You can encrypt any local file using the AES-256 standard (.enc format) or decrypt it to its original file name just within your browser.

Visualizes the delivery route (Received) of raw email sources and the status of sending security authentication (SPF/DKIM/DMARC) in an easy-to-understand manner.

This is a simulator that allows you to switch the sandbox attribute (allow-scripts, etc.) of an iframe and verify browser security access restrictions.