Skip to content
PithLab

↑↓ to move · Enter to open · Esc to close

Security & Privacy

Generate strong passwords, passphrases and random tokens, hash text with SHA-256 or bcrypt, sign with HMAC, create key pairs and TOTP codes, and decode certificates and CSRs.

Secrets are generated with your browser's cryptographic random number generator and never leave your device.

Popular security & privacy

Password GeneratorCreate strong random passwords with a secure random generator.Hash GeneratorMD5 and SHA hashes of text or files, side by side.Random Token GeneratorCreate random API keys, secrets and tokens in hex, Base64 or Base62.Password Strength CheckerEstimate password strength and crack time, privately.CSR DecoderDecode a CSR and verify its signature before sending it to a CA.HMAC GeneratorKeyed HMAC signatures with SHA-1, SHA-256, SHA-384 or SHA-512.

More security & privacy

Bcrypt GeneratorCreate and verify bcrypt password hashes, and see what is inside one.Credit Card ValidatorValidate card numbers with the Luhn check and detect the card brand.CSP Header GeneratorBuild, validate and analyse Content-Security-Policy headers.Htpasswd GeneratorMake .htpasswd entries for password-protecting a site with basic auth.JWT EncoderBuild, sign and verify JWTs with HMAC, RSA or ECDSA keys.Key Pair GeneratorGenerate RSA, ECDSA or Ed25519 key pairs as PEM and OpenSSH keys.Passphrase GeneratorCreate strong, memorable passphrases from the EFF diceware word list.PEM to DER ConverterConvert PEM, DER and Base64, split bundles and view the ASN.1 tree.Secret ScannerFind API keys, tokens and passwords in text and mask them before sharing.Security Headers CheckerGrade pasted response headers and get a recommended security header block.Security.txt CheckerFind and validate a site's security.txt file.SSL Certificate DecoderDecode PEM or DER certificates and check expiry, SANs and chain order.Suspicious Link CheckerCheck links for phishing red flags without opening them.Text Encrypt and DecryptPassword-protect text with AES-256-GCM, and decrypt it again.TOTP Code GeneratorLive 2FA authenticator codes from a TOTP secret.