Security
Our Security category features 119 free tools designed to protect, encode, decode, and verify digital information across various platforms. From Base64 encoders to JWT decoders and password generators, these resources offer a robust suite of solutions for maintaining data confidentiality and integrity. Whether you are a developer looking to secure your applications or an individual seeking to safeguard personal information online, this collection has the tools you need to enhance your digital security.
146 tools
Guide
About security tools
Security tools address the need to protect, transform, and verify digital information across many contexts. This category includes utilities for generating credentials, encoding data, analyzing network traffic, and assessing cryptographic strength. Tools range from simple ciphers like ROT13 and Atbash to modern protocols such as JWT, OAuth, and SPF email authentication. Developers use these resources to harden applications, while security professionals rely on them for threat analysis, vulnerability assessment, and compliance mapping.
Before choosing a tool, understand the problem you are trying to solve and the underlying concepts. Base64 encoding is not encryption; it is a transfer encoding scheme often used for embedding binary data in text formats. Hash functions like SHA-256 produce fixed-size digests that are one-way, meaning the original input cannot be recovered. Ciphers such as Vigenère and Beaufort use substitution methods that can be broken with frequency analysis, while modern algorithms like AES provide strong confidentiality when used with proper keys. Mistakes often arise from confusing encoding with encryption, reusing keys, or applying weak classical ciphers to sensitive data without understanding their limitations.
Many tools in this category serve complementary roles. A password generator creates high-entropy strings for authentication, while a hash generator verifies data integrity. A DNS lookup reveals domain infrastructure, and a CVE search helps identify known vulnerabilities. Email authentication tools like DMARC, SPF, and DKIM work together to prevent spoofing. Cryptographic mode visualizers demonstrate how block cipher modes affect security properties. Understanding how these pieces fit together helps you select the right tool for your specific task rather than applying a generic solution.
Find the right tool
Security tools by task
Credentials and Authentication
Password generators, UUID creators, and key pair generators provide the foundational identifiers needed for secure access and session management. These tools produce random or deterministic values that replace weak or reused credentials. Use a password generator when setting up new accounts, a UUID generator for distributed identifiers, and an SSH key generator for encrypted remote connections. The OAuth/OIDC debugger and JWT decoder assist with troubleshooting modern authentication flows.
Encoding, Encryption, and Ciphers
Encoding tools transform data into different formats for compatibility or obfuscation, while encryption tools protect confidentiality using mathematical algorithms. Base64 encoder/decoder, ROT13, Atbash, and Affine cipher serve different purposes: Base64 is for data transport, ROT13 and Atbash are simple letter shifts often used in puzzles, and Affine cipher applies a mathematical substitution. For strong encryption, the AES encryption tool secures text and files. The Vigenère and Beaufort ciphers offer polyalphabetic substitution, and the cipher suite tool handles multiple classical methods.
Hashing, Integrity, and Malware Analysis
Hash generators create fixed-size fingerprints of data to verify integrity, while hash lookup tools compare values against known malware signatures. HMAC generators add a secret key to a hash for message authentication. The MD5 hash generator and SHA-256/SHA-512 options produce digests for file verification. The malware deobfuscator analyzes malicious code, and the string extractor helps security researchers examine binary files. The SRI hash generator ensures web asset integrity, and the encoding chain analyzer untangles nested obfuscation layers.
Network, Email, and Protocol Security
Network and email security tools assess configuration, validate protocols, and detect threats across communication channels. DNS lookup retrieves domain records, while WHOIS lookup provides registration details. The HTTP request builder tests endpoints, and the CORS policy analyzer identifies cross-origin issues. Email authentication tools include the SPF record generator, DMARC record generator, and email validator with MX checking. The OCSP/CRL revocation checker validates certificate status, and the email header analyzer reveals message origins.
Vulnerability Assessment and Compliance
Security professionals use assessment tools to evaluate system weaknesses, map frameworks, and track threat intelligence. The CVSS calculator scores vulnerability severity, and the CVE search tool finds known exploits. The NIST CSF mapper converts framework controls across standards. The IP risk checker assesses reputation and geolocation, while the domain spoofing detector identifies homograph and typosquatting attacks. The MITRE ATT&CK browser aids threat hunting, and the CWE lookup tool navigates common weakness enumerations. The security model decision matrix compares formal models like Bell-LaPadula and Biba.
Questions
Security FAQ
- Is Base64 encryption?
- No, Base64 is an encoding scheme that converts binary data into ASCII text for safe transmission or storage. It provides no confidentiality and can be reversed without a key. Use encryption algorithms like AES if you need to protect the content of your data.
- What is the difference between hashing and encryption?
- Hashing produces a fixed-size digest from input data and is a one-way process; the original data cannot be recovered from the hash. Encryption is two-way, using a key to transform data that can be reversed with the correct key to recover the original content. Use hashing for integrity checks and encryption for confidentiality.
- When should I use a password generator instead of creating my own password?
- Use a password generator when you need high-entropy strings that avoid common patterns or personal information. Generators use random selection from large character sets, making passwords resistant to guessing and brute-force attacks. Creating your own password often results in predictable choices that are easier to crack.
- How do I verify that a file has not been tampered with?
- Generate a cryptographic hash of the file using SHA-256 or another strong algorithm, then compare the resulting hash value to a known good reference. If the hashes match, the file is unchanged. The hash generator tool can create these digests, and the hash lookup tool can compare them against known malware signatures.
- What does a CORS policy analyzer do?
- A CORS policy analyzer sends HTTP requests to a target website and examines the response headers to detect misconfigurations or security vulnerabilities. It identifies whether cross-origin resource sharing is properly restricted, helping developers prevent unauthorized access to their web applications from other domains.