密码与哈希安全 / 哈希与超大文件校验
🛡️ 纯本地计算 · 零网络请求

全套哈希秒算 (支持超大文件流式校验)

实时秒算文本哈希,或拖拽数 GB 超大文件进行流式分块无感校验,不占内存。

点击或拖拽文件到这里
支持几 GB 超大文件,流式计算不占系统内存
MD5 / SHA1 / SHA256 / SHA512 / CRC32 / 国密SM3
MD5 (32位十六进制)
-
SHA-256 (64位)
-
国密 SM3 密码杂凑
-
CRC32 (8位)
-
SHA-1
-
SHA-512
-
密码与哈希安全 / 高强度安全密码生成
🛡️ 纯本地计算 · 零网络请求

高强度安全密码生成

基于高熵随机发生器生成高强度防撞安全密码,支持自定义规则与长度。

生成结果:
密码与哈希安全 / UUID / NanoID 生成
🛡️ 纯本地计算 · 零网络请求

批量唯一标识符 (UUID / NanoID)

批量极速生成符合 RFC4122 标准的 UUID v4 或 21 位轻量 NanoID 标识符。

编码与格式转换 / Base64 文本编解码
🛡️ 纯本地计算 · 零网络请求

Base64 编解码 (支持 UTF-8 & URL-Safe)

标准 Base64 编解码,完整支持 UTF-8 多字节字符与 URL-Safe 网页安全规范。

编码与格式转换 / 多字符集与 Hex 互转
🛡️ 纯本地计算 · 零网络请求

多字符集编码与 Hex 互转

在 GBK、GB2312、UTF-8 字符集与 Hex 十六进制字节序列间自由互转,排查乱码必备。

编码与格式转换 / URL / HTML / Unicode
🛡️ 纯本地计算 · 零网络请求

URL 编解码 / HTML 实体 / Unicode

URL 百分比编解码、HTML 实体字符转义与 \uXXXX Unicode 编码相互转换。

编码与格式转换 / JSON / YAML / TOML 互转
🛡️ 纯本地计算 · 零网络请求

数据格式互转 (JSON / YAML / TOML)

纯本地双向转换与美化格式化 JSON、YAML、TOML 结构化配置数据。

➔
编码与格式转换 / JWT 离线安全解析
🛡️ 纯本地计算 · 零网络请求

JWT (JSON Web Token) 本地隐私解析

在本地完全离线解码 JSON Web Token,解析 Header 与 Payload 并校验过期时间。

离线解析,Token 绝不离机
条码与二维码 / 二维码即时生成定制
🛡️ 纯本地计算 · 零网络请求

二维码即时生成定制

纯本地毫秒级渲染矢量二维码,可自定义容错率、前景色、背景色并导出 SVG/PNG。

条码与二维码 / 一维条形码生成
🛡️ 纯本地计算 · 零网络请求

一维条形码生成

生成 Code 128、EAN-13、Code 39、Data Matrix、PDF 417 等常见工业物流条码。

条码与二维码 / 条码/二维码图片极速识别
🛡️ 纯本地计算 · 零网络请求

图片二维码 / 条形码本地极速识别解码

上传或拖拽包含一维条码或二维码的图片,利用 WASM 内核纯本地极速识别解码。

上传或拖拽包含条码/二维码的图片
自动检测 QR_CODE, CODE_128, EAN-13, DataMatrix 等
等待载入图片...
图像与隐私处理 / 证件照防盗安全水印
🛡️ 纯本地计算 · 零网络请求

证件照全屏密集防盗水印

为身份证、护照、执照等重要证件图片压制密集倾斜防盗文字水印,防止冒用盗用。

证件图片载入与实时预览
点击或拖拽要加水印的证件图片
支持身份证、护照、驾驶证、营业执照 (JPG/PNG/WebP/BMP)
防盗水印规则定制
图像与隐私处理 / EXIF 隐私元数据检测擦除
🛡️ 纯本地计算 · 零网络请求

EXIF 隐私元数据检测与一键擦除

深度检查照片中包含的相机型号、拍摄参数与危险的 GPS 经纬度位置,一键剥离擦除。

待检测照片上传
点击或拖拽待检测照片
深度扫描设备型号、光圈快门与敏感 GPS 轨迹 (JPG/PNG/WebP/BMP)
EXIF 元数据与隐私风险检测
等待载入待检测照片...
图像与隐私处理 / 纯本地图片格式互转与 Favicon
🛡️ 纯本地计算 · 零网络请求

纯本地格式互转 (可制 Favicon.ico)

在 WebP、ICO (Favicon)、PNG、JPEG、BMP 之间纯本地高速互转,绝无上传损耗。

待转换图片载入
点击或拖拽待转换格式的图片
支持 PNG / JPG / WebP / BMP / ICO 互转
转换参数配置
🛡️ 100% Client-Side WebAssembly · Zero Network Uploads

Developer Security & Utilities Toolbox Online

Calculate cryptographic file hashes (MD5, SHA-256, SM3), generate hardware-grade random passwords, decode JWT tokens offline, add anti-theft ID watermarks, and convert image formats directly in your browser. Powered by WebAssembly and client-side crypto primitives, BoxyKit Toolbox guarantees 100% data privacy with zero server uploads.

Essential Tools for Security & Daily Workflow

🔐

Multi-GB Streaming File Hashes

Compute MD5, SHA-1, SHA-256, SHA-512, CRC32, and SM3 hashes. Stream multi-gigabyte ISOs and videos smoothly with zero memory bloat.

🔑

Hardware CSPRNG Password Generator

Generate cryptographically secure passwords, passphrases, and UUID/NanoID tokens using hardware-backed cryptographic random number generators.

🕵️

Offline JWT & Encoding Inspector

Decode JSON Web Tokens locally to inspect header and payload claims without exposing Bearer tokens to the web. Convert Base64, Hex, and GBK charsets.

🛡️

Anti-Theft ID Watermark & Images

Stamp dense, customized anti-theft watermarks on ID cards and licenses using HTML5 Canvas. Convert images to WebP, PNG, JPEG, and 32x32 Favicon (.ico).

How to Use BoxyKit Toolbox

1

Select Tool

Browse tools by category (Cryptography, Encoding, Barcode/QR, Image Security) or use the sidebar search bar.

2

Input Data or Files

Paste text strings, drag and drop documents/images, or customize password generation parameters.

3

Pure-Local Computation

Calculations run instantaneously in browser WebAssembly memory without sending any byte over the wire.

4

Copy or Download

One-click copy hashes, tokens, and formatted output, or download watermarked images and converted files.

🛡️

Hardware-Accelerated Client-Side Cryptography

BoxyKit Toolbox leverages client-side WebAssembly (WASM) and browser-native Web Cryptography APIs. By reading large files via chunked FileReader ArrayBuffers, hashing routines run in linear memory without exhausting RAM. Sensitive secrets, credentials, ID cards, and proprietary payloads are completely shielded from server logging and interception.

Frequently Asked Questions

Q: Are my files or passwords uploaded to BoxyKit servers?
Never. Every single calculation—whether hashing a 5GB file, generating a password, or decoding a JWT—is performed strictly inside your browser's local sandbox. No data is sent over the network.
Q: Can BoxyKit calculate hashes for multi-gigabyte files?
Yes. BoxyKit uses chunked streaming (typically 2MB–8MB slices). Your browser reads and digests file chunks sequentially, allowing you to hash 10GB+ system images and video files smoothly without consuming excessive RAM.
Q: Is decoding JWT tokens online safe?
Most online JWT decoders transmit tokens to their backend servers, exposing session cookies and API secrets. BoxyKit decodes JWTs 100% locally in browser memory, making it completely safe for production credentials and sensitive tokens.
Q: How does the ID card watermark protect privacy?
When submitting scanned copies of national IDs or business licenses, adding a full-coverage diagonal watermark (such as '仅供办理XX业务使用,他用无效') prevents malicious reuse or fraud. BoxyKit renders the watermark via local HTML5 Canvas without cloud processing.
Q: Does BoxyKit support Chinese National Commercial Cryptography (SM3 / SM4)?
Yes. BoxyKit includes native WebAssembly implementations of SM3 cryptographic hash algorithms alongside standard MD5, SHA-1, SHA-256, and SHA-512.
Q: Can I use this toolbox when disconnected from the internet?
Yes. The toolbox is fully functional offline once loaded. You can verify checksums, create passwords, and inspect data securely in isolated environments.

Explore More Privacy-First Tools