Security Tools
Four security utilities that run in your browser: a cryptographically secure password generator, a hash calculator (SHA-256, SHA-1, MD5), a UUID v4 generator, and a Base64 encoder/decoder. None of your inputs are transmitted or stored.
Generate strong passwords, compute SHA-256 hashes, encode and decode Base64, and create UUIDs — all running in your browser. No data is transmitted to any server. Whether you're creating unique passphrases for new accounts, verifying file integrity with checksums, or encoding data for API authentication, these security utilities handle common cryptographic and encoding tasks on your own device.
Security tools are only as trustworthy as where they run. Every utility here executes in your browser with the Web Crypto API — passwords never leave your device, hashes are computed locally, and there is nothing to sign up for.
Try Password Generator first
Generate a password you can actually trust — it is created in memory with cryptographic randomness and never transmitted.
- 1
Set the length
Anything from 8 to 128 characters; 16 or more is a solid default for most accounts.
- 2
Pick character sets
Toggle uppercase, lowercase, numbers, and symbols to match the site's requirements.
- 3
Copy it into a password manager
The password is generated in memory and shown once — store it immediately.
What Each Tool Does
Password Generator
Set length (8-128 characters), toggle uppercase, lowercase, numbers, and symbols. The generator creates a random password using the Web Crypto API.
Hash Generator
Paste text or upload a file to compute its SHA-256, SHA-1, or MD5 hash. Useful for verifying file integrity or checking password hashes.
UUID Generator
Click to generate a UUID v4 (random). Generate one at a time or in batches of 10, 50, or 100 for database seeding or API testing.
Base64 Encoder/Decoder
Convert text to Base64 and back. Also handles URL-safe Base64 encoding for use in query parameters and JWTs.
Real Ways People Use These
Creating Account Passwords
You're signing up for a new service and need a strong password. Generate a 24-character random string with mixed character types and copy it to your password manager.
Verifying Downloaded Files
You downloaded a software package and want to verify it's authentic. Paste the file into the hash generator and compare the output to the hash published by the developer.
Generating Database IDs
You need unique identifiers for records in a database. Generate a batch of UUIDs and use them as primary keys or foreign key references.
Encoding API Credentials
Your API requires Base64-encoded credentials in the Authorization header. Paste your username:password string and get the encoded value.
Pick the right tool for the job
Four common scenarios and the tool that handles each one.
| When you need to… | Use | Why |
|---|---|---|
| Create a new account password | Password Generator | Cryptographically random output from window.crypto — the same source browsers use for TLS. |
| Verify a downloaded file | Hash Generator | Compute SHA-256 locally and compare it against the publisher's published checksum. |
| Generate database primary keys | UUID Generator | Batch out UUID v4 values in one click for seeding or API fixtures. |
| Encode credentials for an API call | Base64 Encoder | Encode username:password pairs or URL-safe strings without a server round-trip. |
Getting the most out of these tools
Never reuse the generated password
Generate per site and store in a manager — the tool remembers nothing, so a breach anywhere stays contained.
Use SHA-256, not MD5
For integrity checks SHA-256 is the standard; MD5 and SHA-1 have known collision vulnerabilities.
Base64 is encoding, not encryption
Anyone can decode it — use it for transport formats like API auth headers, never for secrets at rest.
How it works
The password generator uses window.crypto.getRandomValues() for cryptographic randomness. The hash tools use the browser's SubtleCrypto API (window.crypto.subtle). These are the same APIs browsers use for TLS connections.