Web security essentials — hashing, encoding, SSL, JWT, password strength, and keeping your apps safe.
Web security essentials — hashing, encoding, SSL, JWT, password strength, and keeping your apps safe.
A file hash is a fingerprint that detects tampering or corruption. Learn how file hashing works, which algorithm to use, and generate a file hash free in your browser without uploading anything.
Read ArticleStandard Base64 breaks in URLs. URL-safe Base64 fixes that with two character substitutions. Learn the difference, when it matters, and encode or decode free in your browser.
Read ArticlePassword strength scores aren't just a progress bar. Learn what entropy, character sets, and pattern detection actually measure — and how to check any password free in your browser.
Read ArticleWHOIS exposes your name, address, email, and phone number to anyone who looks. We explain what domain privacy does, why it matters, and where we get ours for free with every domain registration.
Read ArticleHMAC signatures let APIs verify that requests are authentic and unmodified. Learn how HMAC works, how to sign and verify requests, and generate signatures instantly free.
Read ArticleBCrypt is deliberately slow — and that's the point. Learn why fast hashing algorithms are wrong for passwords, how BCrypt works, and how to use it correctly in your apps.
Read ArticleJWTs are everywhere in modern auth — but most developers use them without truly understanding them. Learn what's inside a token, how signing works, and common pitfalls.
Read ArticleMD5 and SHA-256 both produce hashes — but they're not interchangeable. Learn what each is good for, why MD5 is broken for security, and when to use which algorithm.
Read ArticleWhat actually makes a password strong? Length, randomness, entropy — explained plainly. Plus how to generate and check secure passwords instantly in your browser.
Read ArticleBase64 isn't encryption — it's encoding. Learn what it actually does, when to use it, when not to, and how to encode and decode instantly in your browser.
Read ArticleFormat, encode, generate, and convert — everything runs client-side. No account needed.