Developer tools, with a security lens
Fast utilities that also tell you when something is a risk. Nothing leaves your browser.
🔑 JWT Inspector
Decode a JWT and flag alg=none, weak HMAC, and expiry.
#️⃣ Hash Generator
SHA-1 / 256 / 512 via Web Crypto — with a note on what is broken.
🔁 Encoder / Decoder
Base64 · URL · Hex, both directions.
🛡️ Password Auditor
Entropy, character pool, and common-password check.
📋 Security Headers
Paste raw HTTP response headers → a graded report.