Online Security Tools For Free

Generate strong passwords, hash text with MD5 and the SHA family, and decode JWTs with free online security tools.

Everything runs in your browser, so nothing you type is ever sent to a server.

Security Tools Collection

Strong Random Password Generator

Generate strong random passwords and check its stregth with password strength meter

Open

MD5 Encrypt/Decrypt

Encrypt strings to MD5 hashes or decrypt MD5 hashes to strings by iterating combinations

Open

SHA1 Encrypt/Decrypt

Encrypt strings to SHA1 hashes or decrypt SHA1 hashes to strings by iterating combinations

Open

SHA224 Encrypt/Decrypt

Encrypt strings to SHA224 hashes or decrypt SHA224 hashes to strings by iterating combinations

Open

SHA256 Encrypt/Decrypt

Encrypt strings to SHA256 hashes or decrypt SHA256 hashes to strings by iterating combinations

Open

SHA384 Encrypt/Decrypt

Encrypt strings to SHA384 hashes or decrypt SHA384 hashes to strings by iterating combinations

Open

SHA512 Encrypt/Decrypt

Encrypt strings to SHA512 hashes or decrypt SHA512 hashes to strings by iterating combinations

Open

JWT Encoder/Decoder

Encode, decode, verify or debug JWT (JSON Web Token) for HSxxx, RSxxx & ESxxx algorithms

Open

Want to support?

Top Security Tools On The Web

There is an obvious problem with hashing a password or decoding a token on a website: you have just handed the thing you were trying to protect to somebody else's server. The security tools on 10015.io avoid that by doing the work in your browser. The values you type are never transmitted, logged or stored.

The hashing tools cover MD5 and the SHA-2 family — SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512 — which is what you need for checksums, integrity checks and comparing a value against a hash somebody else produced. Worth knowing: a hash is one-way by design, so no tool can turn one back into the original text. Anything claiming to "decrypt" a hash is looking the value up in a table of already-known ones.

The JWT tool reads the header and payload of a JSON Web Token so you can see what is actually inside one while debugging, and the password generator produces strong random passwords locally rather than on a server that could keep a copy.