Drag the slider to rotate the inner wheel and see the live letter mapping — an interactive alternative to typing a Caesar shift number.
Waiting...
Waiting...
Waiting...
A novel cipher that encodes text as hex color swatches — each 3-byte chunk becomes one #RRGGBB color. Paired with the visual strip below so you can literally see your message.
Waiting...
Waiting...
Waiting...
Matches against the built-in word list — finds words using exactly those letters (any subset length ≥ 3).
No QR code scanned yet.
Uses your browser's built-in barcode detector. Not all browsers support this — Chrome/Edge on desktop work best.
6
Waiting...
Each word is chosen by "rolling" 5 cryptographically random dice (1-6) and mapping the result to a word list — the classic Diceware method, distinct from the plain Passphrase Generator above.
English text has a well-known letter frequency (E, T, A, O, I, N... are most common). Compare the bars below to help spot a Caesar shift or crack a simple substitution.
Combines Kasiski examination (repeated substring spacing) with the Index of Coincidence to suggest the most likely Vigenère key length(s) — a classic step before brute-forcing the key itself.
Waiting...
Everything here happens in your browser — nothing is sent to the server.
Generates a scannable QR code for the text above — handy for sharing a saved-chain link or a TOTP secret.
16
Waiting...
5
Waiting...
Got Caesar-shifted text but don't know the shift? Paste it below and see all 26 possibilities at once.
⭐
Results will appear here.
🔐
The password manager needs an account so your vault can sync between visits.
Checks a password's length, character variety, and common patterns entirely in your browser — it's never sent anywhere.
Waiting...
Verify a downloaded file wasn't corrupted or tampered with. The file is hashed locally and never uploaded.
Waiting...
32
1
Waiting...
Generates the same 6-digit codes an authenticator app would, from a Base32 secret (the kind shown when a site sets up 2FA). Runs entirely in your browser.
------
Decodes a JSON Web Token's header and payload. This only decodes — it can't verify the signature without the signing secret.