A fast, private suite of 55+ cryptography, token, encoding, data-format, network and generator tools. Powered by WebAssembly — zero servers, zero tracking.
DeevLab is a high-performance, client-side developer workstation: modern cryptography (AES-GCM, AES-CBC/CTR/ECB, ChaCha20-Poly1305), password hashing (Argon2id, bcrypt, scrypt), token inspection and signing (JWT), cryptographic hashing, multi-base encodings, data format converters, network diagnostics, and identifier generators. Every operation executes in high-performance WebAssembly directly inside your browser tab.
Nothing is ever uploaded. There is no backend API to trust: your data, keys, and tokens never leave your device.
AES-GCM, AES-CBC, AES-CTR, AES-ECB, ChaCha20-Poly1305, Argon2id, bcrypt, scrypt, PBKDF2, Ed25519 signing, and HS* JWT verification — robust cryptography that runs entirely on your device.
MD5, SHA-1, SHA-2 family, SHA-3, Keccak-256, BLAKE2s/b, BLAKE3 and CRC32 computed simultaneously, plus HMAC and keyed BLAKE2.
Format, validate and convert between JSON, YAML, TOML, CSV, XML and SQL. Generate TypeScript interfaces from JSON payloads instantly.
UUID v1–v7, ULID, NanoID, secure passwords with entropy analysis, random bytes, styled QR codes & webcam scanner, cron explainers, HTTP status and ASCII tables.
IPv4 / CIDR subnet calculator, Unix epoch timestamp converter, interactive cron expression explainer, regex tester with capture groups, and HTTP status code reference.
JWT debugger with expired claim detection, HS256/384/512 token generator & signature verification, and Ed25519 asymmetric keypair creation and message signing.
Yes, your data stays 100% local. All tools execute entirely within your browser sandbox via WebAssembly. No inputs, plaintexts, keys, or tokens are ever transmitted to any remote server — there is no backend API or telemetry beyond static file hosting.
DeevLab provides authenticated AES-GCM (Galois/Counter Mode) with AAD and configurable part ordering, as well as classic AES block modes: AES-CBC (with PKCS#7 padding and 16-byte IV), AES-CTR (counter stream mode), and AES-ECB (key-only, without IV or tag). All AES computations run locally in Rust/WASM at native speed.
MD5, SHA-1, SHA-224/256/384/512, SHA3-224/256/384/512, Keccak-256 (Ethereum), BLAKE2s-256, BLAKE2b-512, BLAKE3 and CRC32 — plus HMAC (HMAC-MD5, HMAC-SHA256, HMAC-SHA512) and keyed BLAKE2 MACs.
Yes. You can benchmark and generate secure password hashes using modern memory-hard functions (Argon2id with customizable memory/time/parallelism, bcrypt with configurable work factor, scrypt, and PBKDF2), and verify candidate passwords against standard PHC formatted strings.
The JWT Decoder breaks down standard JSON Web Tokens into formatted Header, Payload, and Signature components with live timestamp parsing (iat, exp, nbf) and expiration status. The JWT Signer lets you generate and cryptographically verify HS256, HS384, and HS512 signatures using a shared secret.
Yes. All random values are generated using the operating system's Cryptographically Secure Pseudo-Random Number Generator (CSPRNG via WebCrypto crypto.getRandomValues and Rust getrandom). We never use insecure pseudo-random generators like Math.random().
Yes. Once loaded, all WebAssembly modules and scripts operate completely offline without requiring an active internet connection. You can use it as a reliable offline developer workstation.