Frequently Asked Questions

What is Crypto Tools Online?

Crypto Tools Online is a free collection of browser-based cryptography utilities — password generator, strength checker, UUID generator, bcrypt hash, JWT decoder, and AES encryption — that run entirely in your browser. No account, no software, no uploads.

Are these tools really free?

Yes. All tools are completely free with no hidden fees, premium tiers, or credit limits.

Are my passwords or tokens sent to your servers?

No. Every operation happens locally in your browser using JavaScript. Inputs never leave your device — they do not appear in any network request, log, or analytics event.

How random are the generated passwords and UUIDs?

True cryptographic randomness from the browser's crypto.getRandomValues API — the same primitive used to derive HTTPS session keys.

What is the difference between this and a password manager?

We generate values; a password manager stores them across sessions and devices. We are stateless and have no storage. Pair this tool with a real password manager (1Password, Bitwarden, KeePass) for a complete workflow.

Does the JWT Decoder verify the signature?

No. Signature verification requires the issuer's public key, which is a server concern. This tool decodes the header and payload — enough for debugging claims, expiration, audience, etc.

What bcrypt cost should I pick?

For new applications, cost 12. For high-traffic systems where login latency matters, 10 is acceptable. Each step doubles the work, so 12 is roughly 4× slower than 10.

Is the AES encryption tool suitable for sensitive data?

For casual encryption of short messages with a strong passphrase, yes. For regulated data (medical, legal, financial compliance) use vetted purpose-built software like age or GPG with proper key management.

Can I use these tools on my phone or tablet?

Yes. All tools are fully responsive and work on any modern mobile browser including Chrome and Safari.

Do you store any of my data?

We do not store any tool input. We may collect anonymized analytics (page views, browser type) to improve the site.

How do I report a bug or suggest a new tool?

Please use our Contact page. We read every message and aim to respond within two business days.