Skip to content
Developer Assistance Tools

Security tools

The security category has six tools for certificates, encoding, identifiers, passwords, generated sample data and keys. They run in the browser, and generators use the browser’s cryptographic random source.

Certificates

Section titled “Certificates”

Path: /tools/security/certificates

Decodes certificates, keys and bundles. Its page is titled Certificate & Key Decoder.

  • Paste, drop or choose a file. It accepts PEM or DER with any extension: a certificate, chain, CSR, key, .p7b bundle or CRL. Base64 without the header lines also works.
  • Parses X.509, PKCS#7, PKCS#8, PKCS#10, PKCS#12 and raw ASN.1 in the page. Nothing leaves the browser.
  • A password field for an encrypted key or a .p12 file.
  • An example certificate to load.

Encoding

Section titled “Encoding”

Path: /tools/security/encoding

Encodes and decodes text and files, and computes hashes. Its page is titled Encoding Tools.

  • Formats: Base64, Base64 URL-safe, Base32, Base58, Hex and Binary; quoted-printable, URL component, whole URL, HTML entities, Unicode escapes and ROT13.
  • JWT: decode only.
  • QR code: generate one (with a size and an error-correction level, then download the PNG or copy the source text) or read one with the camera.
  • Hashes: SHA-256, SHA-1, SHA-384 and SHA-512.
  • HMAC: HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512 and HMAC-SHA-1 (legacy), with the key as UTF-8 text, hex or Base64, and the output as hex or Base64. You can paste an expected signature to check one you were sent.
  • Drop any file as input, and download a decoded file.
  • An ASCII table, and a button to use the output as the next input.

UUID

Section titled “UUID”

Path: /tools/security/uuid

Generates and inspects UUIDs. Its page is titled UUID Tools.

  • Generate UUID versions 1 through 8 in bulk, using the browser’s cryptographic random source. Nothing is requested from a server.
  • Format options: lowercase or uppercase, hyphens kept or removed, wrapped in braces or with a urn:uuid: prefix, listed one per line or quoted and comma separated.
  • Copy the values or download them as uuids.txt.
  • An inspector: paste one UUID for a full breakdown, or many for a validity list. It decodes a UUID to its version, variant and embedded timestamp.
  • A “Which version should I use?” section.

Password Generator

Section titled “Password Generator”

Path: /tools/security/password

Generates passwords and passphrases in the browser.

  • Kinds: Password, Passphrase, or Pattern. In a pattern, A is an uppercase letter, a a lowercase letter, 9 a digit, # a symbol, * any character, W a word and C a capitalised word. Anything else is kept as written.
  • Length (or number of words), how many to generate, and minimums for uppercase, lowercase, digits and symbols, each of which can be used or left out.
  • Safe mode, on by default for shells, XML and URLs: symbols are limited to - _ . ~ and a password never starts with one. Turn it off to choose your own symbols.
  • Symbol sets of safe, wider or custom, characters to never use, characters to also allow, and an option to skip look-alike characters (0 O 1 l I).
  • Passphrases use the EFF large wordlist, at 12.9 bits a word, with a choice of separator and capitalisation.
  • Generated without modulo bias. Copy or download the output.

Generators

Section titled “Generators”

Path: /tools/security/generators

Generates sets of invented data such as fake names, addresses, emails, JSON records, passwords and API keys. Pick a type from the list or search for one; the page suggests terms such as email, address, IBAN and lorem. The data is invented, not real people or accounts.

  • Set how many values to generate, and for some types a length or character set.
  • Copy the output or download it.

Keys

Section titled “Keys”

Path: /tools/security/keys

Generates and converts keys. Its page is titled Key Generator & Converter. It uses your browser’s WebCrypto.

  • Generate a key pair: EC P-256, P-384 or P-521, Ed25519, or RSA 2048, 3072 or 4096.
  • Paste a PEM key (PKCS#8, PKCS#1, SEC1, encrypted or public) or a JWK, or choose a file. A password field handles locked keys.
  • Convert to: private key as PKCS#8, PKCS#1 / SEC1, PKCS#8 password protected or JWK; public key as SPKI, PKCS#1 (RSA), JWK or OpenSSH.
  • Output options for line width (64, 76 or one line) and line ending, with Copy and Download.