Security
Compare safe and unsafe PDF extraction runs to detect hidden text, off-page content, tiny text, and hidden-layer prompt injection risks
pdf-prompt-injection-scannerValidation
Validate passport numbers from different countries (China, USA, Japan, etc.)
passport-validatorSecurity
Generate secure random passwords
password-generatorCryptography
Generate PBKDF2 key derivation hash
pbkdf2-generatorCryptography
Validate password against PBKDF2 derived key
pbkdf2-validatorSecurity
Validate password strength and check against common security requirements
password-validatorSecurity
Generate cryptographically secure one-time tokens for web security scenarios — CSRF tokens, OAuth/OIDC state parameters, session nonces, and PKCE code_verifier/code_challenge (S256). Uses crypto.randomBytes, never Math.random.
nonce-generatorValidation
Validate or generate numbers using the Luhn algorithm (mod-10). Works for credit cards, IMEI, IMEISV, SIN, NPI and any custom Luhn-based identifier.
luhn-checksumSecurity
Generate JSON Web Keys (JWK) for RSA, EC (P-256/P-384/P-521/secp256k1), and OKP (Ed25519/Ed448/X25519/X448), or parse an existing JWK to inspect its parameters, thumbprint, and metadata
jwk-generatorSecurity
Decode a JWT (header + payload) with syntax highlighting, diagnose standard claims, and verify the signature with HS*/RS*/PS*/ES*/EdDSA keys — plus a tampered-token forgery demo
jwt-inspector-verifierSecurity
Decode JWT header and payload, verify HS256 or RS256 signatures, and flag algorithm, expiry, and sensitive-claim security risks
jwt-decoder-security-auditorValidation
Validate MAC addresses and identify vendor information
mac-address-validator