Tools
Process images, PDFs and tables. Files stay in your browser.
RSA and SM2 encryption and signatures
Encrypt, decrypt, sign or verify text with an RSA key (PEM: PKCS #1, PKCS #8, public key or certificate) or an SM2 key (hex or PEM). Keys stay in the browser and are never saved with workflows.
Caesar cipher and Morse code
Encrypt or decrypt with the Caesar cipher (any shift), ROT13, ROT47 or Atbash, or encode and decode international Morse code.
Symmetric encryption (AES, SM4, DES)
Encrypt or decrypt text with AES (CBC, ECB, CTR, CFB, OFB or GCM), SM4, DES, Triple DES, Blowfish, RC2, RC5, RC6, RC4, Rabbit or XOR. The key is a separate input and is never saved with workflows.
Key pair generator
Generate RSA, ECDSA (P-256, P-384, P-521), Ed25519 or SM2 key pairs as PEM in PKCS #8 or traditional form, for JWT, TLS or encryption tests.
CRC and checksums
CRC-8, CRC-16 (Modbus, CCITT, XMODEM and more), CRC-32, CRC-32C, Adler-32, BCC (XOR), LRC and 8-bit sum of hex bytes or text, shown in hex, decimal and binary.
Hash text (MD5, SHA, SM3)
MD5, SHA-1, SHA-2, SHA-3, Keccak, RIPEMD-128/160/256/320, SM3, BLAKE2 and BLAKE3 digests of text, hex or Base64 input, optionally line by line.
File checksums
MD5, SHA-1, SHA-256, SHA-512, SHA3-256, SM3, BLAKE3, CRC-32 or xxHash64 of up to 50 files of any type, read as a stream so large files work.
HMAC
HMAC of text with a secret key using MD5, SHA-1, SHA-2, SHA-3 or SM3. The key is a separate input and is never saved with workflows.
JWT decode
Show a JWT’s header, payload and readable issue, start and expiry times without checking the signature.
JWT sign
Sign a JSON payload as a JWT with HS, RS, PS, ES or EdDSA algorithms, optionally adding issue and expiry times. Secrets and private keys are a separate input and are never saved with workflows.
JWT verify
Check a JWT’s signature with a secret, public key, certificate or JWK, and optionally its expiry and start times. Unsigned tokens and HMAC tokens checked against a public key are rejected.
Certificate decoder
Read PEM certificates and certificate requests: subject, issuer, validity, alternative names, public key, key usages, other extensions and fingerprints.
PFX/P12 to PEM
Export the private key, certificates and public key from a PFX or P12 file as PEM, including files from OpenSSL 3 (AES) and older RC2 or 3DES ones.
Self-signed certificate
Create a self-signed TLS certificate and private key for development and testing from host names and IP addresses, one per line. The key is generated in the browser.