Symmetric Encryption
One key encrypts and decrypts. AES-GCM bundles in authentication, so tampering with the ciphertext is detected automatically.
Asymmetric Encryption
Encrypt with a public key, decrypt only with the matching private key. Generate a pair on the Key Generation page first.
File Tools
Hash a file or encrypt it with AES-GCM. The file is read and processed in memory — it's never uploaded anywhere.
Hashing
Turn data into a fixed-size fingerprint. Use SHA-256 or SHA-512 for integrity checks; avoid MD5 and SHA-1 outside legacy compatibility.
HMAC
Proves both integrity and authenticity — only someone holding the key could have produced this tag.
Digital Signature
Sign with a private key; anyone with the public key can verify the signature came from you and the message wasn't altered.
Compare Values
Paste two hashes, HMACs, or signatures to confirm they match exactly — a manual step people skip and shouldn't.
Key Generation
Generate real, exportable keys for the tools above — AES for symmetric work, RSA for encryption and signatures.
PBKDF2 & Argon2id
Turn a password into a key or storable hash, slowly and deliberately, so brute-forcing it is expensive. Argon2id is the current recommended default; PBKDF2 remains widely supported.
Key Exchange
Simulates two parties (A and B) deriving the same shared secret over an insecure channel using elliptic-curve Diffie–Hellman — each generates a keypair, exchanges public keys, and independently arrives at an identical secret.
JWT Tool
Decode, verify, or issue JSON Web Tokens signed with HMAC (HS256) or RSA (RS256).
Encoding
Convert text to and from Base64 or hexadecimal — encoding, not encryption; anyone can reverse it.
Password & Entropy
Generate a strong random password, or check how much entropy an existing string carries.
History
Operations you've run in this tab. Nothing here is saved once you close or reload the page. Click an entry to reload it into its tool.
