JWT tools (decode, encode/sign HS256, validate expiry/signature), OAuth tools (client setup, PKCE generator/verifier, scope builder, state/token validator), crypto tools (bcrypt PBKDF2, AES-128-CBC encrypt/decrypt, cookie parser/security analyzer, CSP nonce generator/policy builder), SSL scanner, and SAML assertion decoder. (SHA/MD5 hash has its own dedicated page.)
Compute SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA-3, and RIPEMD-160 hashes, generate HMACs, and encrypt/decrypt text with AES. All client-side, no server uploads.
SSL/TLS tools (certificate decoder/validator, TLS cipher reference), security tools (secret scanner, security.txt generator, robots.txt/DNS record validator), config linters (Docker Compose, Dockerfile, htaccess, Kubernetes YAML, GitHub Actions), and data validators (GeoJSON, RSS feed, sitemap, XPath, cron expression, email).
Network tools (port number lookup with 25+ services, user-agent parser, query string parser), formatters (SSE event formatter, rate limit header parser, pricing tier builder), crypto/security (TOTP generator with SHA-1, SSH key generator RSA/ECDSA/Ed25519), and time tools (timestamp to date, time zone converter with 14 zones, world clock).
Cloud tools (AWS IAM policy analyzer), converters (JSON to YAML, Excel to CSV), CIDR calculator, and extras (hash generator SHA-1/256/384/512, Markdown quick editor with live preview). (Password strength checker has its own dedicated page.)
Color tools (hex/rgb/hsl/conversion), border/radius CSS generator with preview, and typography CSS generator with live preview. (SVG editor has its own dedicated page.)
Security Toolkit lets you jWT tools (decode, encode/sign HS256, validate expiry/signature), OAuth tools (client setup, PKCE generator/verifier, scope builder, state/token validator), crypto tools (bcrypt PBKDF2, AES-128-CBC encrypt/decrypt, cookie parser/security analyzer, CSP nonce generator/policy builder), SSL scanner, and SAML assertion decoder. (SHA/MD5 hash has its own dedicated page.). Everything runs inside your browser — nothing is uploaded to a server. It works on any device with a modern web browser.
JWT tools (decode, encode/sign HS256, validate expiry/signature), OAuth tools (client setup, PKCE generator/verifier, scope builder, state/token validator), crypto tools (bcrypt PBKDF2, AES-128-CBC encrypt/decrypt, cookie parser/security analyzer, CSP nonce generator/policy builder), SSL scanner, and SAML assertion decoder. (SHA/MD5 hash has its own dedicated page.) It's ideal for developers, designers, and anyone who needs to jwt tools (decode, encode/sign hs256, validate expiry/signature), oauth tools (client setup, pkce generator/verifier, scope builder, state/token validator), crypto tools (bcrypt pbkdf2, aes-128-cbc encrypt/decrypt, cookie parser/security analyzer, csp nonce generator/policy builder), ssl scanner, and saml assertion decoder without installing software or sending data to external servers.
Direct text entry, file upload, or URL-based input — depending on the tool. Paste or type your content directly into the provided editor area.
Yes. After the initial page load, Security Toolkit runs entirely on your device with no internet connection needed. All processing is done locally.
Tools cover JavaScript, CSS, HTML, SQL, Python, JSON, XML, CSV, and more. Check individual tool descriptions for specifics.
No. All code processing — formatting, minification, conversion, hashing — runs locally in your browser.
Yes. Since processing is local, performance depends on your device. Most operations handle large files without issue.
Yes. SQL uses sql-formatter, JSON uses native JSON.parse, and other formatters follow widely adopted formatting rules.
Yes. All developer tools work fully offline after the initial page load.
Time Converter
Convert between time units including seconds, minutes, hours, days, weeks, months, and years with precise decimal results.
Diff Checker
Compares two input texts side-by-side, highlighting inserted, deleted, and changed lines with distinct background colors.
Regex Tester
Provides an interactive environment where users can write a regular expression pattern, test it against sample strings, and view real-time match.
JSON Formatter
Pretty-prints raw JSON with configurable indent width, key sorting, and bracket collapsing options while flagging syntax errors with exact.
JS Minifier
Strips comments, whitespace, and shortens local variable names in JavaScript source without altering execution semantics.
Base64 Encode/Decode
Encodes text or small files into Base64 strings and decodes them back with automatic MIME-type detection for binary safety.