Security & Generators
Free online security tools for passwords, passphrases, TOTP codes, HMAC and JWT inspection. No signup.
5 tools
Security & Generators covers five local tools for creating credentials, generating one-time codes, producing keyed digests and inspecting JWT contents. Password Generator creates character-based passwords, Passphrase Generator builds multi-word credentials, TOTP Code Generator & Tester derives time-based codes from an existing secret, HMAC Generator produces keyed message digests, and JWT Decoder & Inspector reads token fields without presenting them as signature-verified. The tools run in your browser and do not act as a password manager, identity provider or remote authentication service.
Which tool should I use?
- Use Password Generator for character-based credentials and Passphrase Generator when you prefer several random words that are easier to type or remember.
- Use TOTP Code Generator & Tester when you already have a TOTP secret and need to derive or check time-based codes; use HMAC Generator for a keyed message digest from text and a shared secret.
- Use JWT Decoder & Inspector to read header and payload fields; decoding a token is not the same as verifying its signature or trusting its claims.
Limitations and things to know
- Generated values are not stored or synchronized, so save credentials and secrets in an appropriate manager if you need them later.
- JWT decoding is inspection only, and locally generated TOTP or HMAC results do not prove who owns or issued the underlying secret.
- These utilities do not check breaches, manage accounts, rotate secrets automatically or replace a production authentication system.
TOTP Code Generator & Tester
Generate time-based one-time codes from a supplied TOTP secret for testing or account setup checks.
Use toolPassphrase Generator
Generate a random multi-word passphrase for credentials that favor length and readability over a dense character mix.
Use toolHMAC Generator
Generate an HMAC from text and a shared secret for supported digest algorithms, entirely in the browser.
Use toolJWT Decoder & Inspector
Decode JWT header and payload fields for inspection without presenting the token as signature-verified or trusted.
Use toolPassword Generator
Generate random passwords in your browser using its cryptographic random source; choose the length and character types.
Use tool