Security & Secret Tools

Explore free security and secret generator tools for developers: 64-bit and 256-bit secrets, API keys, SHA-256 and HMAC hashes, JWT decoders, Base64URL encoders, UUID generators, and more. All tools run in your browser with Web Crypto for privacy.

Use our free security and secret generator tools to create API keys, cryptographic secrets, SHA-256 and HMAC hashes, decode JWT tokens, and generate UUIDs — all in your browser with Web Crypto. Nothing is stored on our servers.

Popular Security Tools

All Security & Secret Tools

64-bit Secret Generator

Generate a cryptographically secure 64-bit secret (8 bytes) in hex, Base64, Base64URL, or unsigned decimal format.

Use 64-bit Secret Generator

128-bit Secret Generator

Generate a secure 128-bit secret (16 bytes) as hex, Base64, Base64URL, or UUID-style string.

Use 128-bit Secret Generator

256-bit Secret Generator

Generate a secure 256-bit secret (32 bytes) for encryption keys, signing secrets, and high-entropy tokens.

Use 256-bit Secret Generator

API Key Generator

Generate API keys with atz_live, atz_test, or custom prefixes plus secure random suffixes.

Use API Key Generator

Secret Key Generator

Generate configurable-length secret keys with uppercase, lowercase, numbers, and symbols.

Use Secret Key Generator

Random Token Generator

Generate URL-safe random tokens with adjustable length for sessions, CSRF, and API auth.

Use Random Token Generator

Bearer Token Generator

Generate Bearer tokens formatted for Authorization headers (Bearer <token>).

Use Bearer Token Generator

Hex Secret Generator

Generate random secrets as hexadecimal strings with configurable byte length.

Use Hex Secret Generator

Base64 Secret Generator

Generate random secrets encoded as standard Base64 with configurable entropy length.

Use Base64 Secret Generator

Secure Password Generator

Generate strong passwords with crypto-secure randomness and custom length and character sets.

Use Secure Password Generator

SHA-1 Generator

Compute SHA-1 hash of text using the Web Crypto API in your browser.

Use SHA-1 Generator

SHA-256 Generator

Compute SHA-256 hash of any text locally using Web Crypto — ideal for checksums and fingerprints.

Use SHA-256 Generator

SHA-512 Generator

Compute SHA-512 hash of text with Web Crypto in the browser.

Use SHA-512 Generator

HMAC SHA-256 Generator

Compute HMAC-SHA256 of a message with a secret key using Web Crypto locally.

Use HMAC SHA-256 Generator

Hash Compare Tool

Compare two strings or SHA-256 hashes and see if they match — useful for verifying digests.

Use Hash Compare Tool

JWT Decoder

Decode JWT header and payload locally. View algorithm, claims, and expiration — signature not verified.

Use JWT Decoder

JWT Payload Viewer

View JWT payload claims in a readable JSON format — local decode only.

Use JWT Payload Viewer

JWT Expiration Checker

Check if a JWT is expired from the exp claim — decoded locally in your browser.

Use JWT Expiration Checker

Base64URL Encode

Encode text to Base64URL (RFC 4648 URL-safe) without padding.

Use Base64URL Encode

Base64URL Decode

Decode Base64URL strings back to plain text locally.

Use Base64URL Decode

Hex Encode

Encode text to hexadecimal representation.

Use Hex Encode

Hex Decode

Decode hexadecimal strings back to readable text.

Use Hex Decode

Random Number Generator

Generate cryptographically secure random integers in a custom min–max range.

Use Random Number Generator

Random String Generator

Generate random strings with letters, numbers, and optional symbols.

Use Random String Generator

Nano ID Generator

Generate Nano ID-style compact unique IDs (default 21 characters, URL-safe).

Use Nano ID Generator

UUID v4 Generator

Generate RFC 4122 UUID v4 identifiers using crypto.randomUUID().

Use UUID v4 Generator

UUID v7 Generator

Generate time-ordered UUID v7 identifiers for sortable unique IDs.

Use UUID v7 Generator

Frequently Asked Questions

Are these security tools free?
Yes. All tools in this category are free with no signup required.
Is my data stored?
Secrets and hashes are processed locally whenever possible and are not stored on our servers.
Which tool should I use for API keys?
Use the API Key Generator or 256-bit Secret Generator for high-entropy credentials.