Security

Decode a JSON Web Token's header and payload without verifying the signature.

Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests of text.

Identify the likely algorithm behind a hash from its format and length.

Score a vulnerability with CVSS v3.1 or v4.0 base metrics, or decode a vector string.

Decode a PEM certificate to read its subject, issuer, validity, SANs and fingerprints.

Decode a PKCS#10 certificate signing request to check its subject and SANs before you submit it.

Compute an HMAC over a message with a secret key using SHA-1, SHA-256, SHA-384 or SHA-512.

Estimate a password's entropy in bits from its length and character set, with a crack-time ballpark.

Build a valid /.well-known/security.txt file (RFC 9116) from a short form.