Encryption Toolkit

AES Encrypt/Decrypt encrypts or decrypts text with AES-GCM or AES-CBC, deriving the key from a passphrase via PBKDF2 rather than requiring you to manage a raw key — the common case of "encrypt this text with a password" in one place, running entirely on the browser's native Web Crypto API. That covers symmetric encryption, where one key does both directions; for asymmetric encryption or signing, where a public and private key each do half the job, RSA Key Pair Generator generates a real key pair as standard PEM, for either RS256-style signing or RSA-OAEP encryption. Need an actual TLS certificate rather than just a key pair? CSR Generator builds the PKCS#10 request a certificate authority needs — with a new key pair or one you already generated here. Already have a CSR and want to check what's actually in it before submitting it? CSR Decoder decodes any standard CSR and verifies its signature against its own embedded public key. Need a key pair for logging into a server instead of for TLS? SSH Key Generator generates an Ed25519 or RSA key pair formatted exactly as OpenSSH expects, ready for authorized_keys. Already have an SSH key and want to check what it is rather than generate a new one? SSH Key Inspector reads any RSA, Ed25519, or ECDSA public key and shows its type, fingerprint, and bit length. Once a key exists, SSH Config Generator builds the ~/.ssh/config block that ties a host alias to it — User, Port, IdentityFile, ProxyJump, and ForwardAgent. Managing a whole authorized_keys file rather than one key? SSH authorized_keys Auditor audits every key in it at once — duplicates, missing comments, deprecated algorithms, and keys with no restrictions attached.