Decoders & Security Tools
Decode tokens and certificates, analyse IAM policies, and check the headers and secrets that gate access to your systems.
Free, no sign-up. Browse all 129 tools →
AWS IAM Policy Analyzer
Paste an AWS IAM policy to spot wildcard actions, over-broad resources, public principals, and privilege-escalation paths — with a least-privilege grade.
AWS ARN Parser & Builder
Break any AWS ARN into partition, service, region, account, and resource, with validation notes. Build one from fields too.
HTTP Security Headers Analyzer
Grade HTTP response headers against the OWASP secure-header baseline — HSTS, CSP, cookie flags, MIME-sniffing, clickjacking — with fixes.
TOTP Authenticator Code
Generate the current 2FA code from a base32 TOTP secret (RFC 6238, like Google Authenticator) with a live countdown — computed locally.
Basic Auth Header Generator
Turn a username and password into an HTTP Authorization: Basic header and its base64 token — encoded entirely in your browser.
SSL Certificate Decoder
Decode X.509 PEM certificates in your browser — subject, issuer, SANs, validity, key type, and SHA fingerprints. Nothing leaves your machine.
JWT Decoder
Decode JSON Web Tokens client-side: header, payload, human-readable timestamps, expiry status, and optional HS256 signature verification.
Log & PII Redactor
Mask emails, IPs, tokens, JWTs, cards, and secrets out of pasted logs before sharing them in a ticket or screenshot — in the browser, nothing uploaded.
Bcrypt Generator & Checker
Hash a password with bcrypt at a chosen cost factor, and verify a plaintext against an existing bcrypt hash — entirely in your browser.
CSR Decoder
Decode a PKCS#10 Certificate Signing Request — subject (CN, O, OU…), SANs, public key type and size, signature algorithm — and verify its self-signature.
Certificate Key Matcher
Check whether an SSL certificate, private key, and CSR belong together by comparing their public keys. Your private key never leaves the browser.
SSL Certificate Converter
Convert certificates between PEM, DER, PKCS#7 (.p7b), and PKCS#12 (.pfx) — bundle a cert and key into a .pfx or extract them back out. All in your browser.
AES Encrypt / Decrypt
Encrypt and decrypt text with a password using AES-256-GCM and a PBKDF2 key — salt and IV are bundled in the output. Runs entirely in your browser.
Encrypt / Decrypt File
Password-encrypt any file with AES-256-GCM and download the result — decrypt it later with the same password. The file never leaves your browser.
RSA Encrypt / Decrypt & Key Generator
Generate an RSA key pair (1024/2048/4096) as PEM, then encrypt with the public key and decrypt with the private key using RSA-OAEP. All local.
Password Strength Analyzer
Score a password on entropy, character variety, and common patterns — with an estimated crack time and concrete warnings. Or generate a strong one.
Content-Security-Policy Builder
Build a Content-Security-Policy directive by directive or from a preset, import an existing policy to edit, and get header, nginx, and meta-tag snippets.