Security Guides

Privacy, hashing, file safety, and data protection topics.

9 articles

HMAC vs Hash: When to Use Each for Authentication and Integrity

A developer deep dive on HMAC. Why a plain SHA-256 hash does not authenticate a message, how HMAC adds a key, length-extension attacks, real-world uses (webhook signing, JWT HS256, AWS SigV4, session cookies, OTP), and common mistakes.

Read Guide

JSON Web Tokens (JWT) Explained: Structure, Signing, and Common Mistakes

A developer deep dive on JSON Web Tokens. The three parts of a JWT, how HS256/RS256/ES256 signing actually works, JWT vs session cookies, and six common JWT security mistakes to avoid.

Read Guide

How to Verify File Downloads: Why a Checksum Alone Is Not Enough

Why a SHA-256 checksum alone does not prove a download is genuine. The signed SHA256SUMS workflow, real supply-chain incidents, GPG verification, and how to verify Tor Browser or an Ubuntu ISO end to end.

Read Guide

MD5 vs SHA-256 vs SHA-512: Which Hash Algorithm Should You Use?

A developer decision guide for choosing between MD5, SHA-256, and SHA-512. Covers SHA family history, MD5 collision attacks, performance on modern hardware, length extension, HMAC, and a use-case decision matrix.

Read Guide

WiFi QR Code Generator - Share Network Passwords Without Typing Them Out

Generate WiFi QR codes that let guests connect without typing your password. Covers the WIFI string format, encryption types, hidden networks, and real security trade-offs.

Read Guide

bcrypt Password Hashing Explained for Developers

A developer guide to bcrypt. How it works, why speed matters, the cost factor, code examples in Node, Python, Go, PHP, and common mistakes to avoid.

Read Guide

How to View Image EXIF Metadata Online

See the hidden data your photos are carrying. Camera settings, timestamps, and GPS location - all in your browser, without uploads.

Read Guide

Hash Generator Online - Generate MD5, SHA-256 and More Instantly

Generate MD5, SHA-1, SHA-256, and SHA-512 hashes online. Learn about hash algorithms, file integrity verification, and security best practices.

Read Guide

Secure Online File Conversion - The Safest Way to Convert Documents with StackConvert

Why most online converters uploading your files to their server is a problem, and how client-side processing avoids it entirely.

Read Guide