Security tools
Passwords, TLS certificates and the things that keep you off incident calls.
Password Generator
Cryptographically secure passwords and passphrases, with real crack-time estimates.
Runs in your browser
SSL Certificate Checker
Expiry countdown, chain details, protocol and SAN list for any HTTPS host.
Hash Generator
MD5, SHA-256, SHA-512 and HMAC for text and files, with checksum verification.
Runs in your browser
Reading in this category
How long does it take to crack a password in 2026?
Real crack times for 2026: an 8 character password falls in under 2 hours offline, 16 characters holds for ages. The math, the hardware and what to do.
Are JWTs encrypted? No, and the difference will bite you
JWTs are encoded and signed, not encrypted: anyone holding a token can read every claim. What the signature really protects and what never belongs in a payload.
TLS 1.2 vs TLS 1.3: what changed and what to run in 2026
TLS 1.3 handshakes in one round trip instead of two, drops every broken cipher and encrypts more of the handshake. What changed, why, and how to migrate.