Security & Encoding Tools
Free tools for hashing, encoding, JWT, password generation, and UUIDs
Security and encoding utilities are among the most frequently needed — and hardest to find as clean, trustworthy, browser-based tools. Whether you're hashing a string to verify data integrity, decoding a JWT token to debug an authentication issue, encoding an image as Base64 for an email template, or generating a cryptographically secure password, you need tools you can trust with sensitive data.
MODOO HUB's 9 security and encoding tools run entirely in your browser. The Hash Generator supports MD5, SHA-1, SHA-256, SHA-384, and SHA-512. The JWT Decoder shows the full header and payload without any server round-trip. The Password Generator uses the Web Crypto API's getRandomValues() for true cryptographic randomness — not the predictable Math.random().
Nothing you input is ever transmitted. These tools are safe to use with real API tokens, secrets, and sensitive strings.
What hashing algorithms does the Hash Generator support?
The Hash Generator supports MD5, SHA-1, SHA-256, SHA-384, and SHA-512. Use SHA-256 or higher for security-sensitive applications — MD5 and SHA-1 are considered cryptographically weak.
Can I use the JWT Decoder to verify a token's signature?
The JWT Decoder decodes the header and payload client-side and can validate the HMAC signature if you provide the secret key. It supports HS256, HS384, and HS512 signed tokens.
Are the passwords generated here truly random?
Yes. The Password Generator uses the browser's built-in crypto.getRandomValues() API, which produces cryptographically secure random values — not predictable pseudo-random numbers from Math.random().
What is Base64 encoding used for?
Base64 is used to safely transmit binary data (like images or files) over text-based protocols. It's commonly used in data URIs, email attachments, and HTTP Authorization headers.