Password strength
Estimates entropy from length and character pool, then translates it into an illustrative offline-crack time.
L1 security lab
Small tools, real crypto primitives.
Five utilities I reach for during assessments, rebuilt here so you can try them. Everything runs in your browser with the Web Crypto API — nothing you type leaves this page.
Hash generator
One-way digests via the Web Crypto API. Useful for checksums, not for storing passwords (use Argon2 or bcrypt for that).
Base64 codec
Encoding is not encryption — it just changes representation. Handy when reading tokens, blobs and basic-auth headers.
JWT inspector
Decodes the header and payload of a JSON Web Token. The signature is shown, not verified — verification needs the server's key.
Subnet calculator
IPv4 CIDR math for scoping engagements: network, broadcast and usable range from an address and prefix length.
All computation is local. There is no backend, no analytics and no storage — refresh and everything is gone.