Security, Cryptography & Auth Studios
CSPRNG password/UUID/ULID keygens, MD5/SHA file checksums, HMAC, bcrypt cost benchmarks, AES-256-GCM, RSA/ECDSA keypairs, and JWT/PKCE/TOTP auth studios.
3 unified studios · 100% client-side execution · Zero uploads · No sign-up

Mint CSPRNG passwords, UUID v4/v7, and ULIDs, compute SHA/HMAC digests and file checksums, benchmark bcrypt, seal AES-256-GCM notes, and debug JWT/PKCE/TOTP flows locally.

Password, Passphrase & Keygen Studio
Generate unbiased Web Crypto CSPRNG passwords, Diceware passphrases, UUID v4/v7, sortable ULIDs, NanoIDs, and 256-bit API secrets, plus audit password bit-entropy and crack time.

Hash, Bcrypt, AES & Keypair Studio
Compute MD5/SHA-1/256/384/512 text & file checksums, sign HMACs, benchmark & verify bcrypt hashes, encrypt with PBKDF2 AES-256-GCM, and generate RSA-OAEP/ECDSA PEM & JWK keypairs.

JWT, OAuth PKCE & TOTP Auth Studio
Decode JWT headers & OIDC claims locally, verify and mint HS256/384/512 tokens via Web Crypto, generate OAuth 2.0 PKCE S256 challenges, and test RFC 6238 TOTP 2FA codes.
Common workflows in Security & Crypto Studios
Credentials & modern sortable identifiers
Generate unbiased passwords, Diceware passphrases, timestamp-ordered RFC 9562 UUID v7, Crockford ULIDs, NanoIDs, and 256-bit API keys.
Checksums, Bcrypt, AES-256-GCM & PEM keypairs
Verify file SHA-256 checksums, test bcrypt cost factors 4–14, encrypt text with PBKDF2 + AES-GCM, or mint ECDSA P-256 / RSA-OAEP PEM keypairs.
JWT, OAuth 2.0 PKCE & TOTP 2FA debugging
Verify HS256/384/512 JWTs, generate S256 code_verifier/code_challenge pairs, and inspect live 6-digit RFC 6238 TOTP tokens.
Security & Crypto Studios — frequently asked questions
- Are private keys, JWTs, or passphrases ever transmitted?
- Never. Every cryptographic primitive executes in local Web Crypto memory with zero network requests.
Related security & crypto studios guides
Collections and guides covering security & crypto studios.
Explore all 37 browser studios
37 local-first utilities across 11 categories — free and ready with no sign-up.