Free Security & Crypto Tools
Privacy-first security utilities for authentication debugging, webhook verification, encoding, and certificate inspection.
Your data stays in your browser
Sensitive inputs (tokens, passwords, keys, and configs) are processed locally in your browser and is never sent to a server.
Privacy-first security utilities
Security tools decode JWTs, verify webhook signatures, generate key material, compute digests, and inspect certificates, all without sending secrets to a remote API. Use them during auth integration, incident response, and security reviews when paste-and-inspect workflows are faster than spinning up local scripts.
Hash, HMAC, KDF, and AES utilities support test-vector generation and middleware debugging. Password analyzers estimate strength; generators create compliant secrets for fixtures. ID validators check format rules for common identifier types used in access control.
Responsible use
Even with client-side processing, treat decoded tokens and generated keys as sensitive. Rotate credentials after debugging, use synthetic passwords in shared demos, and never commit private key material surfaced during inspection.
Pages in this category include extended guides explaining algorithms, common pitfalls, and how results map to production verification steps.
Multi-tool workflows
Short playbooks that chain DevPipe tools for common security tasks. Each step links to a tool page with its own reference guide.
- Debug API authentication
Trace a failing bearer token from decode through signature checks. Each step uses a different DevPipe tool; deep explanations live on those tool pages.
- Integrate incoming webhooks
Verify provider signatures and inspect payload hashes during Stripe, GitHub, or custom webhook setup.