Forge secure secrets

Generate strong, configurable passwords with uppercase, lowercase, numbers, symbols, and optional ambiguous-character exclusion. Includes a numeric PIN mode. Entropy comes directly from the browser's cryptographically secure random source.

Create memorable passphrases using Diceware-style word selection from a bundled EFF wordlist. No server is contacted.

Analyze any password with zxcvbn-ts: entropy, score, pattern detection, and realistic crack-time estimates. Flags common leaks and keyboard walks locally.

Generate random API keys, secret keys, and bearer tokens with custom prefixes. Output in hex, base64, base64url, or base58 for Stripe-style keys.

Create SSH key pairs in Ed25519 (modern, compact) or RSA (2048/4096). Exports OpenSSH format and SHA256 fingerprints using local primitives only.

Generate the most common identifier formats: UUID v4 (random), UUID v7 (time-sortable), NanoID (compact URL-safe), and ULID (lexicographically sortable).

Compute MD5, SHA-1, SHA-256, SHA-512, SHA3, BLAKE2, and BLAKE3 hashes directly in the browser. Includes a hash comparator and HMAC-SHA256 support.

Encode and decode Base64, Base64URL, Base32, Hex, URL components, and HTML entities. Handles Unicode correctly without relying on brittle native btoa.

Build a JWT from custom header and payload, sign it, decode without verifying, and validate signatures against secrets or public keys. Supports HS256, RS256, ES256, and EdDSA.

Generate TOTP secrets, display the current code, and render a scannable otpauth:// QR code compatible with Google Authenticator, Authy, and similar apps.

Check a password against a configurable policy — minimum length, required character sets, and NIST-inspired rules — and get a clear pass/fail checklist. Runs entirely in your browser; the password is never sent anywhere.

Generate ECDSA key pairs over the P-256 or P-384 curves using the Web Crypto API. Export the public key as SPKI (PEM), the private key as PKCS#8 (PEM), and both as JWK — all locally, nothing transmitted.

Generate X25519 key pairs and compute the ECDH shared secret between a private key and a peer's public key. Uses @noble/curves because native Web Crypto X25519 support is still inconsistent across browsers.

Generate cryptographically secure random byte sequences of any length from the browser's Web Crypto source. Output as hex, base64, or base64url with a live byte count.

Generate CUID2 identifiers in bulk — collision-resistant, time-sortable, and safe for use in CDN contexts. Created locally with @paralleldrive/cuid2.

Generate HOTP secrets and counter-based one-time passwords (the counter-driven sibling of TOTP). Produces an otpauth:// URI ready to encode as a QR code for authenticator apps.

Generate sets of one-time recovery codes — grouped, hyphen-separated alphanumeric blocks — to use as 2FA backups. Randomness comes from Web Crypto; nothing is sent or stored.

Convert between Unix epoch time (seconds or milliseconds), ISO 8601, and human-readable dates in both directions, with the current timestamp highlighted. Pure native Date — no library, no network.

Convert colors between HEX, RGB, and HSL with a live preview swatch and optional palette generation. Powered by colord (~2 KB) for the conversions, with palette logic on top.

Build a .env file from a list of variable names, filling each one with a cryptographically secure random secret (hex or base64) generated locally in your browser. Copy the result straight into your project.