Cryptography & security

Parse and analyze SSH public keys. Extract key type, algorithm, key size, fingerprints (SHA-256, MD5), and comments from OpenSSH public keys.

Read and inspect C2PA content provenance metadata embedded in image and media files.

Password-protect and unlock URLs entirely in your browser using AES-GCM encryption, compatible with the Link Lock link format.

Check whether an IP address belongs to a known VPN provider or datacenter network.

Connect to a host and port to inspect its TLS/SSL certificate — expiry, trust status, full chain, protocol, and cipher suite.

Validate a domain's SPF, DKIM, and DMARC DNS records to check email authentication and spot misconfigurations.

Check how big a JSON Web Token is in bytes. See the size of the header, payload, and signature, find the largest claims, and test the token against HTTP header limits of nginx, Apache, Node.js, and more.

Create and sign JSON Web Tokens in your browser with HS256, RS256, ES256, EdDSA, and more. Edit the header and payload, set the expiry, use your own secret or private key, and get the public key as PEM and JWK.

Check whether a hostname or website is on the StevenBlack hosts blocklist, the full list with adware, malware, fake news, gambling, porn, and social media domains.

Check whether a hostname or website is blocked by HaGeZi's Multi ULTIMATE DNS blocklist, the largest tier with ads, trackers, telemetry, phishing, malware, and scams, and see which entry blocks it.

Check whether a hostname or website is blocked or targeted by EasyList, EasyPrivacy, and Fanboy's Annoyance List, and see every filter that blocks it, hides elements on it, or allows it.

Hash a password with scrypt, the memory-hard key derivation function. Set the salt, cost (N), block size (r), parallelization (p), and key length, and get the hash as a PHC string, hex, and Base64. Runs in your browser.

Find the subdomains of a domain using DNS records. The tool reads the domain's NS, MX, SOA, SRV, and SPF records and checks 350 common names like www, mail, api, and dev, then lists each subdomain with its IP addresses and CNAME target. Wildcard records are detected.

Generate an RFC 9116 security.txt file so researchers know how to report vulnerabilities on your site.

Open KeePass, Bitwarden, 1Password, LastPass, Chrome and other password manager files and exports to see every login, note and one-time password, right in your browser.

Check whether an IPv4 address is a Tor exit node right now, using the Tor Project's live exit list.

Find out whether an IP address belongs to AWS, Google Cloud, Azure, Oracle Cloud, DigitalOcean, Cloudflare or Fastly, with its range, region and service.

Check whether an email address comes from a disposable, temporary email service, and whether its domain has mail servers.

Remove the password and the printing, copying and editing restrictions from a PDF you can open. Enter the password and download a copy that opens without one. Runs in your browser.

Protect a PDF with a password using AES-256 encryption. Choose whether readers may print, copy or edit it, then download the locked file. Runs in your browser.

Convert password exports between 1Password, Bitwarden, LastPass, KeePass, Chrome, Firefox, Apple Passwords, Dashlane, Proton Pass, NordPass, Keeper, RoboForm and Enpass formats, right in your browser without uploading anything.

Convert a 1Password CSV export to Bitwarden JSON to move your passwords to another password manager, right in your browser without uploading anything.

Convert a Bitwarden JSON export to 1Password CSV to move your passwords to another password manager, right in your browser without uploading anything.

Convert a 1Password CSV export to Bitwarden CSV to move your passwords to another password manager, right in your browser without uploading anything.