Security tools

Hash text and files with MD5, SHA-1, SHA-256 and SHA-512, decode JWTs, generate UUIDs and test password strength locally.

5 tools · free · no account · nothing uploaded

All 5 security tools

What these security tools cover

Checks you would rather not run through someone else's server. Hash a file or a string with MD5, SHA-1, SHA-256 or SHA-512, decode a JWT to inspect its claims and expiry, generate cryptographically random UUIDs, or test how long a password would survive a guessing attack. Hashing and decoding happen in the page, so a password or a token is never transmitted.

Common jobs

  • Checking a download against a published SHA-256 checksum
  • Reading the claims inside a JWT without sending it anywhere
  • Generating UUID v4 values for test records

Why they run on your device

These pages are static files. The work is done by JavaScript in your tab, so a file or a password never leaves your machine — there is no upload endpoint on this site to send it to. That also means no account, no usage counter and no queue.

Questions

Is MD5 still safe?

Not for security. It is fine as a checksum against accidental corruption, but collisions are practical, so use SHA-256 for anything that matters.

Can a hash be reversed?

No, but weak passwords can be guessed. That is why the strength checker estimates guesses rather than claiming a hash is safe.

Other tool groups