Decode claims, inspect expiry, and verify HS256 signatures.
Browser Security Tools
Runs in your browser
No account required
These tools help with everyday security investigation and defensive checks. Inputs stay in the browser, but automated output is guidance rather than a substitute for a production security review.
Tools in this collection
Create strong random passwords or memorable passphrases in your browser.
Generate SHA-256/384/512 and compare known checksums.
Create and verify keyed message authentication codes.
Find likely credentials and consistently redact repeated values.
Inspect pasted PEM or uploaded DER certificates without remote fetching.
Review CSP, HSTS, CORS, cookie flags, and related headers.
Fetch a page and report metadata, headings, links, and structured data.
Extract and check Schema.org JSON-LD blocks from HTML or raw JSON.
Generate passwords, passphrases, and tokens with Web Crypto randomness.
Practical guides
Understand why decoding is not verification.
Reproduce signatures across languages.
Apply a practical baseline without cargo-cult settings.
Continue exploring
HTTP tools
Build, convert, and debug browser HTTP requests.
Log tools
Parse incidents and remove sensitive data before sharing.
Content reviewed .
