Security tools for developers and admins
Audit credentials, headers, and tokens with utilities that explain what they do — and what they cannot replace. Use them for learning and quick checks, not as your only line of defense.
Passwords and entropy
Weak passwords remain a top breach vector. The Password Generator creates random strings with configurable length and character sets. Follow up with the Password Strength Checker to see heuristic feedback — it estimates patterns, not whether a password appeared in a breach database.
For API keys and test credentials, the API Key Generator produces high-entropy tokens suitable for development environments.
Hashing, encryption, and tokens
The Hash Generator computes digests such as SHA-256 for integrity checks and tutorials. The Encrypt / Decrypt tool demonstrates symmetric operations for learning — do not use browser demos for regulated data without expert review.
JSON Web Tokens appear in OAuth and microservice auth. The JWT Decoder parses header and payload segments locally. It does not verify signatures; always validate tokens on your server with the correct keys.
Headers, SSL, and server config
Transport and browser security headers reduce common web risks. Generate starter directives with the CORS Header Generator and htaccess Generator, then tailor them to your stack.
The SSL Checker queries public certificate data for a hostname — useful for quick expiry checks, though production monitoring should use automated alerting.
Frequently Asked Questions
Should I paste production secrets into these tools?
Follow your organization's policy. Even local-only tools run in a browser tab that could be exposed on shared machines.
Does the JWT decoder validate signatures?
No. It only base64-decodes segments for inspection. Verification must happen server-side.
Are generated passwords stored?
No. Generated values exist only in your session unless you save them yourself.
Security tools on DroidXP (—)
Learn more
Explore our guides for deeper walkthroughs, or browse other categories.