Security utilities that never phone home

JWT decoder

Decodes header and payload and reads the time claims. It does NOT verify the signature.

JWT to decode

Hashes

MD5 in pure JS; SHA via Web Crypto. Hashes the UTF-8 bytes of your text.

Text to hash

Encoding

Round-trip text through Base64, hex and URL encoding.

Text to encode or decode

Text → Base64 Base64 → Text Text → Hex Hex → Text URL encode URL decode

CIDR / subnet calculator

IPv4 subnetting plus an IPv6 syntax validator.

IPv4 CIDR block

Calculate

Validate

IPv4 subnetting plus an IPv6 syntax validator.

IPv6 address to validate

Validate

Timestamp converter

Epoch (s/ms, auto-detected) or ISO, shown in UTC and Dominican time (UTC-4).

Epoch or ISO date

Convert Now

UUID v4 generator

Cryptographically-random version-4 UUIDs, generated locally.

How many

Generate UUID

Regex tester

Runs with a time budget and input cap so a pathological pattern cannot easily freeze your tab.

Pattern

Flags

Run

Test string

IOC extractor & defanger

Paste a log or phishing email. Extracts domains, IPs, URLs, emails and hashes — refanging defanged ones first.

Text to extract indicators from

Extract IOCs Defang text Refang text