Local crypto, passkeys, proofs and clear explainers
Security Studio is for cryptography and local secrets — generate passwords, recovery keys and API tokens, hash with bcrypt, inspect JWT/HMAC, and work with passkeys or encrypted notes. It is not for scrubbing PII from documents; use Share-Safe Studio to clean files before you share them. Everything stays in your browser.
Click Open studio — your files and sidebar context stay on one page.
Pick a tool from the sidebar or a popular chip above. Switch anytime without reload.
Download the result or jump to a related studio with your file still loaded.
Step-by-step pages for the most common tasks in this studio.
Grouped like the sidebar — click to open directly.
No — bcrypt and Argon2 demos run locally; nothing is logged server-side.
Yes — Passkey Inspector decodes WebAuthn clientDataJSON and authenticatorData locally; WebAuthn Test registers a demo credential in this browser.
Encrypted Notes seals with libsodium secretbox in your browser — ciphertext stays on your device until you copy it.