安全工具
Passwords, passphrases, API keys, JWT decoding, checksums and anonymization.
Strong 密码生成器Crypto-random passwords with full policy control.密码短语生成器Diceware-style memorable passphrases.密码 Strength 测试器Estimate entropy and crack-time of a password.API Key 生成器Random hex / Base64 secrets of any length.基础 Auth Header 生成器Build and decode Authorization: Basic headers.JWT 解码器Inspect JWT header, payload and signature metadata.校验和验证器Compare a file hash against the published digest.Secret 扫描器Find leaked API keys, tokens, private keys, JWTs and connection strings in config files, logs or code.PII 脱敏工具Mask emails, phone numbers, SSNs, card numbers, IPs, IBANs, MACs and JWTs in logs before sharing them.TOTP Code 生成器Generate RFC 6238 time-based one-time passwords from a Base32 secret, with the otpauth URI.JWT 签名验证器Decode a JWT and verify its HS256 signature locally, with exp/nbf/iat claim checks.EXIFRemoverRemove EXIF, GPS location, camera info, IPTC and comments from JPG, PNG and WebP photos in one batch — every cleaned file is re-parsed in your browser to prove zero metadata remains, and your photos are never uploaded.JWT 生成器Sign and verify JSON Web Tokens entirely in your browser — HS256, HS384, HS512, RS256 and ES256 run on your own WebCrypto, fresh RSA-2048/EC P-256 pairs export as PKCS#8 and SPKI PEM, exp/iat come back as human dates, and the unsigned "none" algorithm is refused by design. Nothing is uploaded.JWTSignerSeal a payload with RS256 (or HS256/HS384/HS512 and ES256) right in the browser: paste claims and a PKCS#8 private key — or generate an RSA/EC pair on the spot — then verify the result on the same page. "none" is never accepted, and your keys never leave this machine.ToBech32Bech32 is an encoding scheme primarily used for Bitcoin SegWit addresses (BIP-0173). It uses a 32-character alphabet that excludes easily confused characters (1, b, i, o) and includes a checksum for error detection. Bech32m (BIP-0350) is an