Security & Crypto Toolkit

1. Choose the inspection, conversion or security operation.
2. Supply the expected input and review its limits.
3. Run the operation and review the result.

Limits and requirements

Do not treat diagnostic results as a comprehensive security audit.

Check each operation’s notes. Some workflows run on your device; others use the OneTabTool server or a named third-party service. Don’t assume every tool processes files in the same way.

Available operations

• Password & PIN generator
• Text hash — MD5 / SHA

  MD5 and SHA-1 are for legacy checksums, not password storage.

• HMAC generator
• Bcrypt hash & verify
• JWT decoder

  Decoding does not verify who signed the token.

• JWT signer — HS256
• RSA key-pair generator

  Private key appears in the output. Save it securely; this tool does not store it.

• TOTP authenticator code

  Generates the current code once; run again for the next time window.

• Password strength estimator

  Local pattern-aware estimate. It does not check online breach databases or guarantee password safety.

• SRI integrity generator
• UUID generator
• URL-safe random IDs
• Base32 encoder / decoder
• PGP public key inspector

  Reads key packets, identifiers, creation and expiry. This does not establish owner identity or trust.

• API key provider format inspector

  Runs only on this device. Format matches do not prove validity, access or ownership. Keys are never sent to providers.

• CSR generator — RSA / SHA-256

  Generates a CSR with DNS subjectAltName and a PKCS#8 private key on your device. The certificate is not issued by this tool.

• SSH RSA key-pair generator

  OpenSSH-format RSA public key and PKCS#8 private key. Keep the private key confidential; no password protection is applied.

• .htpasswd bcrypt entry
• IBAN checksum validator

  MOD-97 checksum and general structure; does not confirm that an account exists.

Questions about Security & Crypto Toolkit