Check implementation details
Header, HMAC, token, and encoding tools help verify small pieces of security-sensitive configuration before they are copied into code or documentation.
16 tools
Use these tools to check entropy, inspect tokens, work through CIDR math, generate headers, and handle common security-related implementation tasks faster.
Practical guide
Security utilities on Utiluno focus on implementation support: entropy estimates, tokens, network ranges, headers, and encoding helpers. They can improve day-to-day checks, but they do not replace threat modeling, code review, audits, or organization-specific security requirements.
Header, HMAC, token, and encoding tools help verify small pieces of security-sensitive configuration before they are copied into code or documentation.
Password, token, nonce, and session tools make length, randomness, and expiration assumptions explicit.
CIDR and IP tools are useful when reviewing allowlists, subnet plans, firewall rules, or cloud networking changes.
Tool library
Estimate password entropy from length and character set assumptions.
Estimate the relative work factor increase created by changing bcrypt cost rounds.
Generate an HMAC signature from a message, secret, and algorithm in the browser.
Inspect an IPv4 CIDR block and calculate its subnet mask, network address, broadcast address, and usable host range.
Convert an IPv4 subnet mask into its CIDR prefix length.
Calculate the size of an IPv4 range between a starting IP address and an ending IP address.
Encode text into URL-safe Base64 using the Base64URL character set used by JWTs and other web-safe formats.
Decode a Base64URL string into readable plain text.
Generate the HTTP Basic Authorization header value from a username and password.
Convert HSTS max-age values between seconds and longer time units for easier policy review.
Convert session lifetime settings into multiple time units and calculate expiry from a duration.
Generate a cryptographically random token in hex, Base64URL, or UUID-style formats.
Estimate the entropy of an API key format from its length and character set size.
Generate a random password with configurable length and character set options.
Generate a Subresource Integrity hash string from script or style content.
Generate a random Content Security Policy nonce value for inline script or style allowlisting.