The complete Auth & Security API toolkit
Password hashing, JWT tokens, TOTP/2FA, key generation, encryption, hashing, encoding, and spam detection. 20 endpoints, pure compute, zero external dependencies.
curl -X POST "https://auth.toolkitapi.io/v1/auth/hash-password" \
-H "X-API-Key: YOUR_KEY" \
-H "Content-Type: application/json" \
-d '{"password": "my-secure-password", "algorithm": "bcrypt"}'
import httpx
resp = httpx.post(
"https://auth.toolkitapi.io/v1/auth/hash-password",
headers={"X-API-Key": "YOUR_KEY"},
json={"password": "my-secure-password", "algorithm": "bcrypt"},
)
print(resp.json()["hash"])
const resp = await fetch("https://auth.toolkitapi.io/v1/auth/hash-password", {
method: "POST",
headers: {
"Content-Type": "application/json",
"X-API-Key": "YOUR_KEY",
},
body: JSON.stringify({ password: "my-secure-password", algorithm: "bcrypt" }),
});
const { hash } = await resp.json();
console.log(`Hash: ${hash}`);
Browse by Category
Everything you need for passwords, tokens, encryption, hashing, and key generation.
Password Hashing
4 toolsHash, verify, analyze strength, and generate secure passwords.
JWT Tokens
3 toolsGenerate, verify, and decode JSON Web Tokens with HMAC and RSA/EC algorithms.
TOTP / 2FA
2 toolsGenerate TOTP secrets with QR codes and verify time-based one-time passwords.
Key Generation
2 toolsGenerate API keys, UUIDs, secrets, and RSA/EC key pairs.
Encryption
2 toolsAES-256-GCM authenticated encryption and decryption.
Hashing & Encoding
6 toolsSHA/BLAKE2 hashing, HMAC signatures, Base64, and multi-format encoding.
Spam Detection
1 toolsHeuristic spam scoring for form submissions and user-generated content.
Built for Developers
Designed to simplify your workflow, not complicate it.
Pure Compute
Zero external API calls, no databases, no file I/O. Every endpoint is instant computation.
20 Endpoints
Password hashing, JWT, TOTP, encryption, key generation, hashing, and spam detection — all from one API key.
Cryptographically Secure
All randomness uses CSPRNG. Secure defaults for bcrypt, argon2, AES-256-GCM, and RSA/EC.
Developer-Friendly
Simple JSON in, JSON out. Clear error messages. Full OpenAPI documentation with Scalar.
Start securing your app in minutes
One API key. 14 endpoints. Hash, sign, encrypt, encode, and more.
Get Free API Key →