Security tools

Encrypt and decrypt text locally with AES-256-GCM and passphrase-derived keys.

Generate signed HS256 JWTs from custom header and payload JSON locally.

Generate 6-digit rolling TOTP codes and otpauth URIs from Base32 secrets.

Check password breach exposure using Have I Been Pwned k-anonymity range API.

Generate bcrypt-style password hashes with configurable rounds for testing workflows.

Generate HMAC signatures (SHA-1, SHA-256, SHA-512) for API and webhook testing.

Generate compact URL-safe random IDs with configurable length and count.

Generate high-entropy API keys with custom prefixes for test and live environments.

Create htpasswd-compatible credential lines for basic-auth protected routes.

Generate Authorization: Basic header values from username and password pairs.

Build a Content-Security-Policy header from domain allowlists.

Decode PEM certificate payload into readable base64/DER metadata basics.