# Security Tools

> Check, generate, and decode security primitives in your browser.

URL: https://uttir.com/security-tools
Tools in this category: 12

## About this category

Security utilities for everyday use: check password strength, generate TOTP / 2FA codes, decode JWTs, and inspect cryptographic hashes. Everything runs locally in your browser — no credentials ever leave your device.

## Tools

- [JWT Decoder](https://uttir.com/jwt-decoder) — Decode a JWT’s header and payload and check its expiration — without sending it anywhere.
- [JWT Sign (HS256 / RS256)](https://uttir.com/jwt-sign) — Sign a JSON Web Token with HS256 (HMAC shared secret) or RS256 (RSA private key). Output is a standard compact JWT (header.payload.signature).
- [HMAC Generator](https://uttir.com/hmac-generator) — Compute a Hash-based Message Authentication Code (HMAC) for any message and shared secret. Supports SHA-256, SHA-512, SHA-1, and MD5. All computation runs in your browser.
- [EXIF Remover](https://uttir.com/exif-remover) — Strip GPS, camera, and timestamps from photos before sharing.
- [Hash Identifier](https://uttir.com/hash-identifier) — Identify which hash algorithm produced a digest by its structure.
- [Luhn / PAN Validator](https://uttir.com/luhn-pan-validator) — Validate a credit or debit card number with the Luhn checksum, identify the scheme (Visa, Mastercard, Amex, Discover, JCB, UnionPay), and generate a display-safe mask.
- [Password Generator](https://uttir.com/password-generator) — Create strong, random passwords with custom length and character sets — right in your browser.
- [Hash Generator](https://uttir.com/hash-generator) — Generate MD5, SHA-1, SHA-256, and SHA-512 hashes of any text instantly.
- [Password Strength Checker](https://uttir.com/password-strength-checker) — See how strong a password really is — entropy, time-to-crack, and a list of issues, all computed in your browser.
- [TOTP Code Generator](https://uttir.com/totp-generator) — Generate time-based one-time passwords (2FA codes) from a Base32 secret. Same algorithm as Google Authenticator.
- [EXIF / Image Metadata Viewer](https://uttir.com/exif-metadata-viewer) — Read EXIF, GPS, IPTC, and other metadata from any image. See camera, lens, location, and timestamp. Your image never leaves your device.
- [AES Encrypt / Decrypt](https://uttir.com/aes-encrypt) — Encrypt or decrypt text with a password using AES-256-GCM. The encryption runs entirely in your browser, the password never leaves the page, and the result is a portable text envelope you can paste into an email, a chat, or a file.

---

For the full HTML page, visit https://uttir.com/security-tools.
This file is the markdown rendering at https://uttir.com/security-tools.md.