Skip to content
FileKit
12 tools

Security And Encoding Tools

Generate hashes, encode and decode payloads, inspect tokens and create secure credentials. These security and encoding tools use the browser Web Crypto API so secrets are never transmitted over a network.

Base64 Encoder Decoder

Encode text or a whole file to Base64 and decode it back, with a URL safe variant and correct UTF-8 handling.

File Hash Checker

Hash a file with SHA-256, SHA-1, SHA-384 or SHA-512 in chunks with real progress, and compare it against an expected checksum.

HMAC Generator

Generate an HMAC of a message with a secret key using Web Crypto, with SHA-256, SHA-384 or SHA-512 and hex or Base64 output.

HTML Entity Encoder Decoder

Encode and decode named and numeric HTML entities, with an option to escape only the five reserved characters or everything non ASCII.

JWT Decoder

Decode a JWT header and payload, pretty print every claim and see exp, iat and nbf as human readable dates with an expired indicator.

MD5 Hash Generator

Generate an MD5 checksum of text or a file in your browser, implemented by hand since Web Crypto deliberately leaves MD5 out.

Password Generator

Generate a cryptographically secure random password with adjustable length, character classes and a real entropy calculation.

Random String Generator

Generate cryptographically secure random strings with alphanumeric, hex and Base58 presets, a custom charset and bulk output.

SHA256 Hash Generator

Generate a SHA-256 hash of text or a file using the Web Crypto API, with SHA-1, SHA-384 and SHA-512 options too.

Text to Binary Converter

Convert text to binary with 8 bit grouping and back again, plus matching hex, octal and decimal views of the same bytes.

URL Encoder Decoder

Percent encode and decode URLs and query strings, with separate component and full URI modes and a parameter breakdown table.

UUID Generator

Generate cryptographically random UUID v4 or time ordered UUID v7 identifiers in bulk, with uppercase and brace formatting.

Why use browser based security and encoding tools

There is a particular irony in pasting a production JWT into an online decoder hosted by a stranger. The whole category of security and encoding tools is one where client side processing is not a convenience but a requirement, and every tool here is built on that principle. Token payloads, password candidates and hash inputs stay inside the browser tab.

Where the platform provides a vetted primitive the tools use it directly. Hashing goes through Web Crypto rather than a hand rolled implementation, random values come from a cryptographically secure generator rather than a pseudo random helper, and the pages are explicit about which operations are genuinely secure and which are merely encoding rather than encryption.

Frequently asked questions

Yes. Every tool in this category is free with no account, no trial and no daily limit. The tools run as JavaScript inside your own browser, so there is no server cost to pass on and no reason to meter usage.

No. Files are read directly from your device into browser memory, processed locally and written back out as a download. Nothing is transmitted, nothing is logged and nothing is stored after you close the tab.

There is no limit imposed by us. The practical ceiling is your own device memory, because the file has to fit in the browser tab while it is being processed. Most machines handle files of several hundred megabytes without trouble.

Current versions of Chrome, Edge, Firefox and Safari on desktop and mobile are all supported. Where a specific tool depends on a capability that a browser has not shipped yet, that tool says so on its own page before you select a file.