Verify an HMAC authentication code without exposing the secret key to the server.
50 public tools across 7 categories.
Search and filter the complete public catalog.
50 matching tools.
Verify an HMAC authentication code without exposing the secret key to the server.
Generate an HMAC authentication code for text or a file using a hexadecimal secret key.
Generate BLAKE3 hashes from text or uploaded files, 256-bit by default and any length up to 1,048,576 bytes, with optional keyed hashing.
Generate BLAKE2b digests at 128, 256, 384 or 512 bits, or any length from 1 to 64 bytes, from text or uploaded files. It runs inside your browser.
Generate BLAKE2s digests at 128, 160 or 256 bits, or any length from 1 to 32 bytes, from text or uploaded files. It runs inside your browser.
Generate Adler-32 checksums from text or uploaded files. Adler-32 is built for speed rather than security, and it runs inside your own browser.
Generate FNV-1 or FNV-1a 32-bit and 64-bit non-cryptographic hashes from text or uploaded files. It all runs inside your browser, on your device.
Generate CRC-32 checksums from text or uploaded files using ISO-HDLC, CRC-32C, BZIP2, MPEG-2, cksum and six more named variants, in your browser.
Generate CRC-64 checksums from text or uploaded files using the XZ, ECMA-182, Go-ISO, MS, NVMe, Redis or WE variant. It all runs in your browser.
Generate SHA-1 digests from text or uploaded files: 160 bits, 40 hexadecimal characters. SHA-1 is not suitable for new security-sensitive uses.
Generate MD4 digests from text or uploaded files for legacy compatibility. MD4 is cryptographically broken. It all runs inside your browser.
Generate MD5 digests from text or uploaded files: 128 bits, 32 hexadecimal characters. MD5 is cryptographically broken and is for legacy use only.
Generate SHAKE128 or SHAKE256 extendable-output hashes of 1 to 1,048,576 bytes from text or uploaded files. It all runs inside your own browser.
Generate Keccak-224, Keccak-256, Keccak-384 or Keccak-512 hashes from text or uploaded files. It runs in your browser, so nothing leaves the device.
Generate SHA3-224, SHA3-256, SHA3-384 or SHA3-512 digests from text or uploaded files. Everything runs inside your own browser, on your device.
Generate SHA-224 digests from text or uploaded files. Everything runs inside your own browser, so the data you paste never leaves the device.
Generate SHA-512/224, SHA-512/256 or full SHA-512 digests from text or uploaded files. Everything runs inside your browser, on your own device.
Generate SHA-384 digests from text or uploaded files. Everything runs inside your own browser, so the data you paste never leaves the device.
Generate SHA-256 digests from text or uploaded files: 256 bits, 32 bytes, 64 hexadecimal characters. It all runs inside your own browser, on your device.
Compress or decompress bzip2 (.bz2) files up to 2 GiB in your browser, with a level from 1 to 9.
Compress or decompress LZ4 (.lz4) files up to 2 GiB in your browser.
Compress or decompress Zstandard (.zst) files up to 2 GiB in your browser, with a level from -7 to 4.
Compress or decompress Brotli (.br) files up to 2 GiB in your browser, with a quality from 0 to 11.
Compress or decompress raw DEFLATE streams (no header, no checksum) up to 2 GiB in your browser, with a level from 0 to 9.
Compress or decompress zlib streams (DEFLATE with a two-byte header and an Adler-32 checksum) up to 2 GiB in your browser, with a level from 0 to 9.
Compress or decompress gzip (.gz) files up to 2 GiB in your browser, with a level from 0 to 9.
Create a salted Argon2id password hash using memory-hard, interoperable defaults.
Generate placeholder text by paragraph, sentence or word, with control over length, vocabulary, truncation and an optional seed for repeatable output.
Validate pasted or uploaded CSV data with custom delimiters, header handling and an optional expected column count. It runs inside your browser.
Percent-encode or decode URL text using component, path, query, fragment, or userinfo rules. It runs in your browser, so your input stays on the device.
Encode bytes with Bitcoin-alphabet Base58 or Base58Check, or decode them back. Supports optional Base58Check version-byte validation.
Transform text with the ROT13, ROT5, ROT18 or ROT47 substitution ciphers. It all runs inside your browser, so your text stays on the device.
Encode text or uploaded files as lowercase hexadecimal, or decode hex back to binary. It all runs in your browser, so your input stays on the device.
Verify a password against an Argon2 PHC hash using the parameters embedded in the hash.
Encode bytes with a self-identifying multibase prefix, or detect the prefix and decode an existing multibase string.
Encode bytes with a human-readable prefix and Bech32 or Bech32m checksum, or validate and decode an existing string.
Alternate lowercase and uppercase letters through your text while preserving spacing and punctuation. It all runs inside your browser, on your device.
Convert text to snake_case, so words become lowercase and spaces become underscores. It all runs inside your browser, so your text stays on the device.
Flip text 180 degrees using Unicode lookalike glyphs, preserving characters that have no upside down form. It all runs inside your own browser.
Encode or decode basE91, a compact printable alphabet. Runs in your browser.
Encode or decode RFC 1924 Base85. Not Ascii85 or Z85. Runs in your browser.
Encode text or files as RFC 9285 Base45, or decode Base45 text back to bytes. Designed for compact use with QR alphanumeric mode.
Encode or decode MIME quoted-printable text. Runs in your browser.
Convert a domain name between Unicode and ASCII Punycode. Runs in your browser.
Encode or decode HTML named, decimal, or hex character references. Runs in your browser.
Encode bytes as whole-value Base62, or decode Base62 text back to bytes. Choose either supported digit and letter ordering.
Encode text or uploaded files as Base32, or decode Base32 text and files back to binary. It all runs in your browser, so your input stays on the device.
Encode text or uploaded files as Base64, or decode Base64 text and files back to binary. It all runs in your browser, so your input stays on the device.
Identify a file's format, MIME type, recommended extension, category and size from its contents. It all runs inside your browser, on your own device.
Encode text or uploaded files as Adobe Ascii85, or decode Ascii85 back to binary. It all runs in your browser, so your input stays on the device.
Browse by the type of work.
Every tag in use across the public catalog.