# Private security & crypto tools — no upload

> Decode JWTs and X.509 certificates, hash and encrypt files, and generate keys and TOTP codes locally. Analytics is disabled on these routes.

Security Vault runs on Web Crypto in your browser. Nothing you paste or encrypt is uploaded, and optional analytics is disabled across these routes.

## Tools in this workspace

- [JWT decoder](https://www.safepaper.app/security/jwt-decoder): Decode & verify tokens
- [Hash & checksum](https://www.safepaper.app/security/hash-verify): SHA & MD5 digests
- [Password strength](https://www.safepaper.app/security/password-strength): zxcvbn scoring
- [AES file encrypt](https://www.safepaper.app/security/file-encrypt): Argon2id + AES-GCM
- [Key pair generator](https://www.safepaper.app/security/key-pair): RSA, ECDSA, Ed25519
- [X.509 decoder](https://www.safepaper.app/security/x509-decoder): Certificate details
- [Key format convert](https://www.safepaper.app/security/key-convert): PEM, DER, JWK
- [TOTP generator](https://www.safepaper.app/security/totp): Time-based OTP
- [Password hasher](https://www.safepaper.app/security/password-hash): bcrypt & Argon2id
- [Shamir sharing](https://www.safepaper.app/security/shamir): Split & reconstruct

Each tool also has a Markdown mirror at its URL plus `.md` (for example https://www.safepaper.app/security/jwt-decoder.md).

---

Canonical HTML: https://www.safepaper.app/security
Markdown: https://www.safepaper.app/security.md

There is no upload endpoint — your files are processed in this browser tab. Open your network tab and check.