Category · 9 tools
Security & privacy
Inspect the security-sensitive parts of an app locally, with nothing uploaded: decode and verify JWTs or sign new ones, read X.509 certificates, compute hashes and HMACs, and check images and documents for hidden metadata before you share them.
ASN.1 Decoder
Decode ASN.1 DER/BER — paste PEM, Base64, or hex and see the tag–length–value tree behind X.509 certificates, keys, and CMS, entirely in your browser.
Certificate Decoder
Decode X.509 / PEM certificates — view subject, issuer, validity, SANs, key, and fingerprints, all in your browser.
works well with JWT Debugger
Hash Generator
Compute MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes of text or a file, plus HMAC — all at once, entirely in your browser.
works well with Encoder / Decoder
JWT Debugger
Decode and inspect JSON Web Tokens: view the header and payload, check expiry, and verify HS/RS/PS/ES signatures — all in your browser.
works well with JWT Signer
JWT Signer
Build a JWT header and payload and sign it with HMAC (HS256/384/512) or an RSA/ECDSA private key (RS/PS/ES) — entirely in your browser. Nothing is uploaded.
works well with JWT Debugger
Metadata Inspector
Inspect the hidden metadata in a photo or document — EXIF, GPS location, author, dates, and more — right in your browser. Download a cleaned copy with the metadata removed.
works well with Metadata Stripper
Metadata Stripper
Strip EXIF, GPS, author, and hidden metadata from images and documents in one batch — locally in your browser. JPEG, PNG, WebP, GIF, PDF, Office, OpenDocument & EPUB.
works well with Metadata Inspector
Password Hash Generator
Hash a password with Argon2id, bcrypt, scrypt, or PBKDF2 — with OWASP-recommended parameters — and verify a password against a hash, entirely in your browser.
PDF Redactor
Redact a PDF so the text is permanently removed, not just covered — and strip its hidden metadata, comments, and attachments. Entirely in your browser, nothing uploaded.