§1
Hash & digest
SHA-1 · SHA-256 · SHA-384 · SHA-512 simultaneously
§2
Password tools
cryptographically secure · uses window.crypto, not Math.random
§3
Encode / decode
Base64 · URL · Hex · HTML · ROT13 · Binary · Morse
§4
CIDR / subnet calculator
network address · broadcast · usable range · mask
IP address classifier
§5
HTTP security header audit
checks 10 OWASP-recommended headers with remediation hints
Paste raw response headers — one per line
§6
JWT decoder & inspector
header · payload · claims · expiry — signature not verified client-side