Hashing & Crypto

Encrypt sensitive text with AES-GCM 256-bit authenticated encryption. Your passphrase is stretched via PBKDF2-SHA256 (200,000 iterations) with a random salt per encryption. The output format is a single base64 blob containing salt, IV, and ciphertext+authentication tag. Decrypt with the same passphrase to recover the original text. All operations via Web Crypto — no third-party libraries.

Generate cryptographic hashes for any text input using four major algorithms simultaneously. SHA-256 and SHA-512 via the Web Crypto API provide standards-compliant secure hashing. MD5 and SHA-1 included for legacy compatibility but clearly marked as broken for security use. Live hash generation as you type — useful for checksums, data verification, and development debugging.

Inspect JSON Web Tokens (JWT) to understand their contents. Decode any JWT into its three constituent parts: header (algorithm and token type), payload (claims and data), and signature. View timestamps in human-readable format and verify token structure. Useful for debugging authentication flows, understanding API tokens, and verifying JWT claims during development.

Classic substitution cipher tools for education, puzzles, and casual obfuscation. ROT13 (rotate by 13 places) is its own inverse — encoding and decoding use the same operation. Caesar cipher supports any shift from 1 to 25, or brute-force display of all possible shifts to find readable text. A fun introduction to cryptography concepts.