Client-Side Security Utilities
Zero-upload, defensive tools for analyzing tokens, measuring cryptographic strength, generating HMAC signatures, and hardening web security headers.
JWT Decoder & Expiry Checker
Safely decode JSON Web Tokens and inspect payload claims and expiration timestamps.
Password Strength & Entropy
Calculate Shannon entropy in bits and estimate realistic crack times under brute-force threat models.
HMAC Signature Generator
Compute cryptographic HMAC-SHA256, SHA-512, and SHA-1 signatures for webhooks and APIs.
Content Security Policy (CSP) Builder
Build robust Content Security Policy headers and meta tags with one-click security presets.
Cryptographic Hash Generator
Compute SHA-256, SHA-512, and SHA-1 hashes client-side with native Web Crypto API.
Random Password & Key Generator
Generate cryptographically secure random passwords, API tokens, and secret keys.
Defensive Security You Can Trust
PicoFix is committed to privacy. By relying entirely on modern browser standards like the Web Crypto API, we deliver industrial-grade cryptographic capabilities without collecting a single byte of your data.
Frequently Asked Questions
Helpful answers to common image compression questions.