Security Tools

SSL Certificate Checker Inspect the certificate a website serves to its visitors. The checker connects to… SSL Expiry Checker See at a glance when your certificates run out. Enter up to ten host names, and… Website Security Checker See how well a website protects its visitors, judged by what is visible from… Password Strength Checker Find out how hard a password would be to guess. The checker looks for the patterns… Password Entropy Calculator Entropy measures how unpredictable a randomly generated secret is. Choose the… Secure Password Generator Some sites demand at least two digits, others accept only a handful of symbols or… Passphrase Generator A passphrase made of several random words is both strong and easy to remember.… PIN Generator People choose PINs badly: 1234, birthdays and repeated digits make up a large… Random String Generator Create random strings for codes, identifiers, test data or coupons. Choose the… Random Token Generator Generate unguessable tokens for password-reset links, sessions, invitations, CSRF… API Key Generator Issue API keys the way well-run platforms do. Each key gets your prefix, so it is… Secret Key Generator Every web framework needs a secret key, and each expects a particular format. Pick… HMAC Generator Calculate a keyed hash-based message authentication code for any message, and… SHA-256 Generator Calculate the SHA-256 hash of any text or file. Files are read in slices and… SHA-512 Generator Calculate the SHA-512 hash of text or a file. Files are streamed through an… MD5 Hash Checker Paste the expected MD5 hash, then choose the file or type the text, and see at… Hash Identifier Found a hash in a database, a config file or a log and need to know what it is?… Hash Compare Tool Comparing two 64-character hashes by eye is error-prone. Paste both, and the tool… File Checksum Calculator Hash a whole batch of files in one go. Drop or choose files, tick the algorithms… Checksum Verifier Do what sha256sum -c does, in your browser. Paste the checksum list a publisher… CSP Generator Write a Content-Security-Policy without memorising its syntax. Fill in where each… Permissions Policy Generator Decide which powerful browser features your pages and the frames inside them may… Security Headers Generator Choose the protections you want and copy ready-to-paste configuration for your… Referrer-Policy Generator The Referer header tells other websites which page a visitor came from, and can… HSTS Header Generator HTTP Strict Transport Security makes browsers use HTTPS for your domain even when… Password Leak Checker Find out whether a password has appeared in a data breach – without revealing it.… Email Breach Checker See which known data breaches included an email address. The tool asks the Have I… Security Header Analyzer Grade the security headers of any page. Enter a URL and our server fetches its… CSP Analyzer Find the weak spots in a Content-Security-Policy. Paste a policy or enter a URL… CORS Analyzer Check whether other websites can read responses from your API. Enter a URL and a… JWT Security Checker Audit a JSON Web Token without sending it anywhere. The checker decodes the header… Cookie Security Checker Check whether your cookies are configured securely. Paste Set-Cookie headers or… TLS Configuration Checker Check a server’s TLS setup in one go. Our server makes a real handshake for each… SSL Cipher Checker See exactly which cipher suites a server accepts. Our server tries common TLS 1.2… Domain Security Checker Get an overview of how well a domain is protected against spoofing and hijacking.…