Security
Security utilities for passwords and token inspection.
Handle sensitive strings in your browser instead of sending passwords or token claims to a third-party service.
Common security tasks you can finish instantly
- •Generate strong random passwords for new accounts.
- •Decode JWT headers and payloads during auth debugging.
- •Inspect sensitive values with a privacy-first workflow.
When to use each tool
Authenticating APIs
When you receive a JWT from a login endpoint and need to verify the exact claims (like roles or expiration) without sending the token over the internet.
Setting up new infrastructure
When spinning up a new database or service and you need a truly random, complex password generated locally on your machine.
Creating secure hashes
When you need to generate Bcrypt or SHA hashes to seed a database or verify file integrity.
Tools in this collection
7 security tools ready to use
Pro Tip: Combine tools for a faster workflow
You can chain these tools together to handle complex tasks. For example:Add JPG receipts → Convert to PDF → Merge with a cover letter PDF → Download one final file.
Frequently Asked Questions
Can the JWT Decoder verify signatures?
The decoder allows you to inspect the header and payload claims locally. It does not verify the signature to keep the tool fully client-side without needing your secret keys.
Are passwords generated offline?
Yes. Passwords are generated using the Web Crypto API built into your browser. They are not stored in any database or sent over the network.