🔐Online crypto & security tools

This category brings together all crypto and security tools for developers: hash generators (MD5, SHA-256), base64 encoding, JWT decoder, encryption and key/secret generators. Everything runs in your browser, free and installation-free, keeping your data private.

▸ Encrypt and decrypt text with AES (AES-GCM)

Encrypt and decrypt text with AES-GCM using a password, in your browser.

▸ API key generator

Generate API keys with a custom prefix (sk_live_, pk_…), cryptographically secure.

▸ Bcrypt password hash and verify

Generate a bcrypt hash of a password and verify a password against a hash, in your browser.

▸ Binary calculator for bitwise operations online

Perform bitwise operations (AND, OR, XOR, NOT, shifts) on two numbers, in your browser.

▸ Classic Ciphers Caesar ROT13 Vigenère Online

Encrypt and decrypt with the Caesar, ROT13 and Vigenère ciphers (educational).

▸ Calculate a CRC32 Checksum Online

Compute the CRC32 checksum of a text (hexadecimal).

▸ Test Credit Card Number Generator (Luhn)

Generate valid TEST card numbers per Luhn (Visa, Mastercard…), for development.

▸ Diceware Passphrase Generator, Memorable & Secure

Generate a memorable, strong passphrase (Diceware method), right in your browser.

▸ Elliptic Curve Key Pair Generator (P-256/P-384)

Generate an elliptic-curve keypair (P-256/P-384) in PEM format, in your browser.

▸ Online Hash and String Comparison Tool

Compare two hashes or strings and check if they are identical (case-insensitive option), in your browser.

▸ Calculate a file's SHA hash

Compute SHA-1/256/384/512 hashes of a local file to check its integrity, with no upload.

▸ MD5 / SHA hash generator

Compute MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests of a text.

▸ HMAC generator (SHA-1, SHA-256, SHA-512)

Generate an HMAC (SHA-1, SHA-256, SHA-384, SHA-512) from a message and a key.

▸ Generate .htpasswd File with Bcrypt (Apache/Nginx)

Generate an .htpasswd line (bcrypt) for Apache/Nginx auth, in your browser.

▸ JWT decoder

Decode a JSON Web Token (header + payload) without sending it to any server.

▸ JWT generator (HS256/384/512)

Generate and sign a JWT (HS256/384/512) from a payload and secret, in your browser.

▸ Verify JWT Signature Online (HS256/384/512)

Verify a JWT signature (HS256/384/512) with a secret and view header and payload, in your browser.

▸ Luhn Validator Online for Card, IMEI and Numbers

Check whether a number passes the Luhn algorithm (credit card, IMEI, SIREN…), in your browser.

▸ NanoID generator

Generate short, URL-safe NanoID identifiers, a compact UUID alternative.

▸ MongoDB ObjectID generator

Generate MongoDB ObjectIDs (24 hexadecimal characters) with an embedded timestamp.

▸ OTP Secret Generator (Base32) for 2FA

Generate a random base32 secret to set up two-factor authentication (TOTP), in your browser.

▸ Password generator

Generate strong random passwords (cryptographically secure), configurable: character sets, ambiguous-character exclusion.

▸ Password strength checker

Test a password’s strength: entropy and estimated crack time, 100% in your browser.

▸ Random Number Generator Within a Range Online

Generate random numbers in a range, with or without duplicates (cryptographic randomness), in your browser.

▸ RSA Key Pair Generator Online (2048/4096, PEM)

Generate an RSA keypair (2048/4096) in PEM format right in your browser, no server involved.

▸ Secret generator

Generate a strong random secret (app secret, session key, JWT secret) in hex, base64url or alphanumeric.

▸ TOTP code generator (2FA)

Generate a TOTP code (2FA, Google Authenticator style) from a base32 secret, in your browser.

▸ ULID generator

Generate ULIDs (lexicographically sortable unique identifiers), a UUID alternative.

▸ UUID generator

Generate UUIDs in bulk: v4 (random), v7 and v6 (time-sortable), v1, plus nil and max.

▸ UUID v5 Generator Online (Namespace, SHA-1)

Generate a deterministic UUID v5 from a namespace and a name (SHA-1), in your browser.

▸ UUID validator (version and variant)

Check that a UUID is valid and detect its version (v1/v3/v4/v5) and variant, in your browser.

▸ XOR Cipher: Encrypt and Decrypt Text (Hex)

Encrypt and decrypt a text with a XOR and a key (hex output), in your browser.

Frequently asked questions

Is my data sent to a server?

No. All Toolbin crypto tools run 100% in your browser. Your passwords, JWT tokens and sensitive data never leave your machine.

Which hash function should I use?

For security, prefer SHA-256 or higher. MD5 and SHA-1 are still handy for file integrity checks but are not recommended for passwords.