Password Strength Checker
Score a password and get specific ways to strengthen it.
Security & Validation
Passwords, encryption, TOTP & validators.
Password Entropy Calculator
Measure password entropy in bits from its character pool.
Credit Card Validator
Check a card number with Luhn and detect its brand.
Email Address Validator
Check email syntax and split out the local and domain parts.
Luhn Number Validator
Verify any number with the Luhn checksum and find its check digit.
Hash Identifier
Guess a hash type from its length and character set.
AES Text Decryptor
Decrypt AES-256-GCM text with your password.
AES Text Encryptor
Encrypt and decrypt text with AES-256-GCM.
Common Ports Reference
Look up well-known TCP/UDP port numbers and services.
Content Security Policy Builder
Assemble a valid CSP header or meta tag, directive by directive.
IMEI Validator
Check if a 15-digit IMEI is valid.
ISBN Validator
Check ISBN-10 and ISBN-13 numbers instantly.
Password Policy Tester
Check a password against your exact rules.
PIN Strength Checker
See how guessable your numeric PIN really is.
Random Salt Generator
Generate cryptographic salts in hex or Base64.
Secure Random Token
Generate cryptographically strong random tokens.
Security Headers Builder
Generate HTTP security headers for any server.
Strong Password Tips
Check a password against strong-password best practices.
Subresource Integrity Hash
Generate SRI integrity hashes for scripts and styles.
TOTP Code Generator
Turn a Base32 secret into a live 2FA code.
TOTP Secret Generator
Create random Base32 TOTP secrets and otpauth URIs.
UUID v5 Generator
Deterministic name-based UUIDs from SHA-1.
About Security & Validation
Security utilities that would be self-defeating to run on someone else's server: password strength and entropy checkers, AES-256-GCM text encryption, hash generators and identifiers, plus validators for credit card numbers (Luhn), IBANs and email addresses. Everything executes locally via the browser's Web Crypto API — the password you test or the text you encrypt never leaves your device, which is the only acceptable way to use tools like these. Validators explain why an input fails, not just that it fails, and the encryption tools use authenticated, salted, standards-based constructions rather than home-rolled ciphers.