Crypto & Hash
A security toolbox: hash and HMAC text, mint UUIDs, tokens and passphrases from a real random source, and move text through base64 and hex.
Hashing a string usually sends you to a website that could log it. This does it in the browser: SHA-1, SHA-256, SHA-384 and SHA-512 come from the platform's SubtleCrypto, MD5 and CRC32 are implemented locally for the checksums and legacy interop those are still needed for, and HMAC signs a message under a key with the algorithm you pick. The generators — UUIDv4, the time-ordered UUIDv7, random tokens, passwords and passphrases — draw from `crypto.getRandomValues`, a cryptographically secure source, never `Math.random`, and the password picker avoids modulo bias.
The encode tab moves text through base64, base64url and hex in both directions, and says so plainly when an input will not decode. Nothing is uploaded, which is the point: a secret you are about to deploy is exactly the sort of value that should not be pasted into someone else's server.
What people open it for
- Getting the SHA-256 of a string without pasting it into a website
- Signing a message with HMAC to check it later
- Generating a secure token, password or passphrase
- Encoding or decoding base64 and hex both ways