Encrypt & decrypt
ClientEncrypt, decrypt, hash, or convert UTF-8 ↔ Base64 with common ciphers. Use the center column for passphrase (when applicable) and the buttons to move data between panels—same flow as a classic three-column crypto UI.
Workspace
Pick a cipher or digest. Symmetric modes use the passphrase in the center; MD5 and Hash are one-way.
?
Uses crypto-js in your tab. No requests to our servers. Passphrase is optional but empty secrets are weak—use only for testing.
MD5 is legacy; prefer SHA-256 for integrity checks.
Passphrase
Optional; empty uses an empty secret (weak).
Common use cases
- Test symmetric cipher output quickly before wiring encryption into app code.
- Generate hash digests for quick checksum checks in development workflows.
- Convert text between UTF-8 and Base64 when debugging token payload pipelines.
Common mistakes to avoid
Treating weak hashes as secure password storage
Fast hashes like MD5 or SHA-1 are not suitable for password storage. Use dedicated password hashing in backend systems.
Losing track of cipher mode and key assumptions
Cipher results depend on algorithm details and key material; make sure both sides use matching settings.
Using the same secret everywhere
Reuse increases blast radius. Isolate secrets by environment and rotate when exposure is suspected.
FAQ
Is this tool suitable for production-grade key management?
No. It is primarily for utility and debugging workflows. Production systems need managed key lifecycles and server-side controls.
Can I compare hashes from other systems here?
Yes. Use the hash tab to reproduce digest values and check whether your input normalization matches the source system.
Does encryption run in my browser?
Yes. This workspace performs supported crypto operations locally in your browser tab.
More tools
Related utilities you can open in another tab—mostly client-side.
File checksum & hash
ClientSHA-256, SHA-512, MD5, CRC-32, and more for a local file—verify downloads without uploading.
Encoding tools
ClientBase64 and URL on this page; hub lists hex, HTML entities, JWT, JSON helpers, crypto, and tokens.
JWT decode
ClientInspect JWT header and payload as JSON in browser; signature not verified.
Password generator
ClientRandom passwords with length and character sets—generated in your browser.