⚠ CRYPTO VAULT ⚠

Generates strong random passwords using your browser's built-in secure random number generator — the same kind used in cryptography. Use this instead of making up a password yourself. Humans are terrible at random. Your browser isn't. Nothing is sent anywhere.

A hash is a fingerprint for data. Run the same text or file through SHA-256 and you always get the same result — but you can't reverse it back to the original. Use it to verify a downloaded file hasn't been tampered with (compare its hash to the one on the official site), or to check if two files are identical without opening them.

A quick non-cryptographic hash — think of it as a cheap checksum for casual use, like detecting accidental data changes. It's fast but not secure: two different inputs can produce the same output, and it's trivial to reverse. Don't use this for passwords or security. Use SHA-256 for anything that actually matters.

A UUID is a randomly generated ID that's statistically guaranteed to be unique — even if a million people generate one at the same time. Used by developers to identify records in databases, files, or API objects without needing a central counter. v4 means it's purely random, not tied to your machine or time.

JWTs are tokens websites use to prove you're logged in — they're passed around in cookies or request headers. They look like encrypted gibberish but the middle part is just base64-encoded JSON anyone can read. Paste one here to see what's inside: who you are, when it expires, what permissions you have. Note: this does NOT check if the signature is valid — it only shows you the contents.

QR codes are just a visual way to encode text or a URL. Generate one to share a link without typing it out. More usefully: decode a QR code before scanning it — paste or upload an image and see exactly where it's sending you. Never scan a random QR in the wild without checking it first.

Actual two-way encryption — unlike a hash, this can be reversed with the right password. Type something, give it a password, and it spits out scrambled ciphertext you can safely share or store. Only someone with the exact same password can decrypt it. Uses AES-256-GCM (military-grade) with PBKDF2 key derivation — the password is never used directly as the key. Good for: sharing sensitive notes, storing secrets in plain sight, sending private info over an insecure channel.