Free Security Tools Online — Uttir
Skip to main content
Uttir

Security Tools

Security utilities for everyday use: check password strength, generate TOTP / 2FA codes, decode JWTs, and inspect cryptographic hashes. Everything runs locally in your browser — no credentials ever leave your device.

Tools in this category: 12

Security Tools

JWT Decoder

Decode a JWT’s header and payload and check its expiration — without sending it anywhere.

Developer Tools

JWT Sign (HS256 / RS256)

Sign a JSON Web Token with HS256 (HMAC shared secret) or RS256 (RSA private key). Output is a standard compact JWT (header.payload.signature).

Security Tools

HMAC Generator

Compute a Hash-based Message Authentication Code (HMAC) for any message and shared secret. Supports SHA-256, SHA-512, SHA-1, and MD5. All computation runs in your browser.

Security Tools

New

EXIF Remover

Strip GPS, camera, and timestamps from photos before sharing.

Image Tools

New

Hash Identifier

Identify which hash algorithm produced a digest by its structure.

Security Tools

Luhn / PAN Validator

Validate a credit or debit card number with the Luhn checksum, identify the scheme (Visa, Mastercard, Amex, Discover, JCB, UnionPay), and generate a display-safe mask.

Developer Tools

Password Generator

Create strong, random passwords with custom length and character sets — right in your browser.

Generators

Hash Generator

Generate MD5, SHA-1, SHA-256, and SHA-512 hashes of any text instantly.

Developer Tools

Password Strength Checker

See how strong a password really is — entropy, time-to-crack, and a list of issues, all computed in your browser.

Security Tools

TOTP Code Generator

Generate time-based one-time passwords (2FA codes) from a Base32 secret. Same algorithm as Google Authenticator.

Security Tools

EXIF / Image Metadata Viewer

Read EXIF, GPS, IPTC, and other metadata from any image. See camera, lens, location, and timestamp. Your image never leaves your device.

Image Tools

AES Encrypt / Decrypt

Encrypt or decrypt text with a password using AES-256-GCM. The encryption runs entirely in your browser, the password never leaves the page, and the result is a portable text envelope you can paste into an email, a chat, or a file.

Security Tools

Frequently asked questions

Other categories