100% local processing — your files and data never leave this browser. No uploads, no server storage.

OnboxTools

Security

Certified Utility Suite

Access our specialized collection of security. Built for security and performance, these tools process all data locally.

Advertisement - Leaderboard (728x90)
🎫

JWT Decoder

Decode JWT header and payload online — inspect claims, expirations, and algorithms in your browser.

Launch JWT Decoder
🔑

Password Generator

Create highly secure, random, or memorable passwords and PINs with customizable entropy settings.

Launch Password Generator
🔏

SHA-256 Generator

Generate SHA-256 hash online — text or file, plus HMAC-SHA256. One-way hash, not encryption.

Launch SHA-256 Generator
🆔

UUID Generator

Generate cryptographically secure Version 4 UUIDs (GUIDs) in bulk for software development and database keys.

Launch UUID Generator
Advertisement - Inline (728x90)

Cryptographic Utilities: Entropy and Randomness

Digital security relies on the unpredictability of random values. Our security tools leverage the 'window.crypto' API to provide cryptographically secure pseudo-random number generation (CSPRNG). This is fundamentally different from 'Math.random()', as it draws entropy from the underlying operating system. When generating UUIDs (Universally Unique Identifiers), we adhere to RFC 4122 standards. Version 4 UUIDs provide 122 bits of randomness, making the probability of a collision effectively zero ($3.4 imes 10^{38}$ combinations). For password generation, we focus on bit-entropy, allowing users to create strings that withstand modern brute-force hardware by mixing character classes and maximizing string length.

Security FAQ

How random is the UUID generator?

We use the browser's hardware-level entropy source, ensuring that every UUID is unique across the global namespace.

Why generate passwords locally?

Online generators that send data to a server can log your passwords. Our local generation ensures the password only ever exists in your device's RAM.

What is the difference between UUID v1 and v4?

v1 is based on time and MAC addresses, while v4 is entirely random. We default to v4 for maximum privacy.