Online Encryption & Developer Tools
Find the right browser-based tool for encryption, encoding, hashing, certificates, tokens, and structured data.
Encrypt text with a passphrase and create a share link; older formats remain available for compatibility
Decrypt text with the original passphrase; shared messages load automatically and older formats remain supported
Identify whether a value looks like Base64, JWT, hex, PEM, a structured hash, or another recognized format
Encrypt plaintext with AES-GCM using explicit key, IV, AAD, tag length, ciphertext, and tag handling
Generate random AES keys in Hex, Base64, or Base64URL with optional GCM nonce and CBC IV bytes
Decode Base64 to readable text or data for inspection and debugging
Encode text or data to Base64 for APIs, logs, and transport
Validate JSON and find syntax errors
Format a JSON string or file
Generate a SHA-256 digest for text and deterministic integrity comparisons
Generate a random password with configurable length, numbers, and symbols
Encrypt armored text to pasted public keys or decrypt it with a matching private key
Create a passphrase-protected Curve25519 OpenPGP key pair and revocation certificate
Split a secret into threshold shares and recombine it.
Create PDF 1.7 AES-128 password protection for a supported, unencrypted PDF
Create EOE1 AES-GCM text by default with explicit legacy compatibility
Create package-specific Blowfish output for tested legacy compatibility
Recover package-specific legacy Blowfish output
Generate Let's Encrypt Certificate
Identify PEM and DER key or certificate blobs, algorithm families, and private-key risk
Check whether certificates, CSRs, public keys, and private keys contain the same public key
Analyze PEM certificate bundles, likely chain order, and hostname matches
Decode PEM certificates and inspect certificate fields
Decode certificate signing requests and inspect requested SANs, subjects, public keys, and signatures
Create certificate signing requests with SAN support
Convert PEM and DER (Base64) for certificates and keys
Generate RSA keys and encrypt or verify signatures
Build SigV4 headers and signatures for AWS requests
Encrypt a URL string with EOE1 AES-GCM by default
Decrypt EOE1 URL ciphertext or explicitly selected legacy AES-CBC
Encrypt short text with EOE1 AES-GCM and check the output length
Decrypt EOE1 short-message ciphertext or legacy AES-CBC
Encrypt a selected file into this site's authenticated .encr format
Recover files from this site's current and legacy encrypted formats
Create a standard AES-256 password-protected ZIP from files or one folder in your browser
Encrypt text with a Caesar cipher
Decrypt a Caesar cipher message
Inspect and decrypt standard OpenSSL enc AES-CBC salted payloads with explicit PBKDF2 or legacy recipe settings
Decrypt AES-GCM ciphertext with explicit key, IV, AAD, tag length, and separate or appended auth tag input
Create a compact JWE from UTF-8 text using a shared Base64URL key and the focused dir plus A256GCM profile
Decrypt and authenticate direct-key compact JWE tokens using the matching shared Base64URL key
Inspect PKCS#12 and PFX archives for certificates, key bags, and friendly names
Generate Ed25519 key pairs in hex, Base64URL, and JWK-ready forms
Sign messages and verify Ed25519 signatures with raw keys in hex or Base64URL
Decode SAML responses and requests, inspect protocol fields, and compare expected identity values
Compare registered and sent OAuth callback URLs exactly and isolate redirect URI differences
Inspect pasted OIDC discovery or OAuth authorization server metadata and isolate exact configuration mismatches
Decode Base64 image data into a preview and download it
Encode or decode URL-safe Base64 strings
Chain gzip, Base64URL, and URL encoding steps
Encode URL string with percent URL encoding
Decode a percent encoded URL string
Decode a JSON Web Token and inspect risky claims
Inspect a single JWK or full JWKS and compare token header hints against pasted keys
Select a JWK from a JWKS and emit PEM public-key output
Calculate RFC 7638 thumbprints from public JWK material
Check JWT signatures against an explicitly selected algorithm and selected claims
Generate RFC 7636 code verifier and code challenge pairs
Encode text as RFC 4648 Base32
Decode RFC 4648 Base32 strings into text and raw bytes
Build otpauth:// TOTP enrollment URIs from issuer, account, and Base32 secret input
Decode protected headers from compact JWE tokens
Transform HTML to Markdown
Transform Markdown to HTML
Transform YAML to JSON
Transform JSON to YAML
Transform CSV to JSON
Transform JSON to CSV
Flatten nested JSON into CSV columns
Transform Hex to ASCII
Transform ASCII to Hex
Convert HTML to Text
Transform JSON to Base64
Decode Base64 encoded JSON into readable structured output
Decode Base64 encoded XML into readable structured output
Encode XML to Base64
Convert JSON to XML
Convert XML to JSON
Convert JavaScript object to JSON
Convert valid JSON into a JavaScript object literal
Format a YAML string or file
Validate YAML and find syntax errors
Format an HTML string or file
Format and indent a well-formed XML string
Format a PHP string or file
Resolve RFC 6901 JSON Pointer paths against pasted JSON
Apply RFC 6902 JSON Patch operations and inspect the resulting document
Canonicalize JSON into a deterministic byte sequence
Validate JSON against a pasted schema and inspect exact error paths
Evaluate JSONPath expressions and inspect matched values plus result paths
Generate a v1 or v4 GUID string
Generate a v1 or v4 UUID string
Inspect UUID version, variant, and timestamp behavior
Generate sortable UUID v7 values and decode the embedded timestamp
Generate sortable ULIDs and decode the embedded timestamp
Minify, uglify and compress JSON file or string
Unminify, format and beautify JSON file or string
Minify, uglify and compress XML file or string
Identify marked password-hash formats and review possible algorithms for raw digest-shaped values
Create a SHA-1 hash for legacy checksums
Create a cryptographic hash using SHA-512
Generate and verify HMAC signatures in hex, Base64, or Base64URL
Verify Stripe, GitHub, and generic HMAC webhook signatures
Generate SHA-256 checksums for files
Generate MD5 output for existing checksum and migration workflows
Generate bcrypt hashes with a selectable work factor
Verify a Bcrypt hash
Generate CSP hash tokens for exact inline script or style content
Generate CSP nonces and matching policy or HTML snippets
Generate Subresource Integrity hashes for pasted asset content
Generate Argon2id encoded password hashes with explicit cost parameters
Verify plaintext passwords against encoded Argon2id hashes
Derive deterministic key bytes with PBKDF2-HMAC-SHA-256 or SHA-512 and explicit salt and iteration settings
Compare two texts, JSON payloads, YAML, or code with a readable diff and exportable patch.
Redact secrets from logs, JSON, YAML, headers, and .env files before sharing
Inspect pasted HTTP response headers, browser policies, and cookie attributes
Obfuscate JavaScript code for testing and review, then validate the output in your environment
Translate and edit cron expressions
Count characters, letters, digits, spaces, and lines in text
Count words in text
Convert lowercase to uppercase
Convert uppercase to lowercase
Converter Unix Timestamps
Normalize Unix timestamps and explicit-offset date strings into RFC 3339 UTC output
Send one direct browser HTTPS request and measure elapsed request time.
Convert local datetimes between IANA time zones and inspect the UTC instant
Looking for other tools? Let us know by sending a suggestion to encryptonline.website@gmail.com.