developer Overview

Test password hashing work factors, verify downloaded binary SHA-256 digests, and encrypt text payloads with authenticated AES-256-GCM + PBKDF2 without transmitting secrets over the network.
Open the free Hash, Bcrypt, AES & Keypair Studio
No account required · Runs in your browser · Instant results
Crypto Cipher Studio uses the browser's native Web Crypto API (`SubtleCrypto` and `crypto.getRandomValues`) so keys, salts, initialization vectors, and plaintexts remain exclusively in local tab RAM.
Quick tip: Use Bcrypt (cost 10–12) for password storage and SHA-256 or HMAC-SHA256 for fast file and webhook integrity checks.
Never. Every digest, HMAC, Bcrypt round, and AES-GCM cipher executes locally in your browser.
Access all features of the Hash, Bcrypt, AES & Keypair Studio — free, browser-based, no account required.
Open Hash, Bcrypt, AES & Keypair StudioGenerate unbiased Web Crypto CSPRNG passwords, Diceware passphrases, UUID v4/v7, sortable ULIDs, NanoIDs, and 256-bit API secrets, plus audit password bit-entropy and crack time.
Decode JWT headers & OIDC claims locally, verify and mint HS256/384/512 tokens via Web Crypto, generate OAuth 2.0 PKCE S256 challenges, and test RFC 6238 TOTP 2FA codes.
developer Overview
