Build a secure random password generator in Node.js with crypto.randomInt(), configurable character groups, and a runnable test.
A JSON Web Token (JWT) API issues a short-lived token after your application has authenticated an account, then verifies it before a protected route runs. I ran JWT_SECRET=development-only-secret node test.mjs on Node v24.18.0 with express 5.2.1 and jsonwebtoken 9.0.3, and…
Choose bcrypt when your Node.js deployment can install native modules. Choose bcryptjs when a pure JavaScript dependency makes installation or deployment simpler. Both libraries use the bcrypt format, so each can verify a hash made by the other. bcrypt vs…
eval() evaluates a string as JavaScript source code. A direct call can read names in the surrounding scope, so the important question is where the string came from before you focus on its syntax. How eval() evaluates a string When…
Use this online password generator when you need a unique password that you can save in a password manager. It generates the value in your browser with the Web Crypto API, so the page does not send the password to…
Paste a compact JSON Web Token into this free online JWT decoder to inspect its header and payload while the browser decodes the segments locally and makes no network request. Decode a JWT without sending it to a server A…
Google OAuth 2.0 lets your application request a defined set of Google API permissions without collecting a Google password. The useful security boundary is narrow: your server starts an authorization-code request, checks the callback against its own session data, then…
Node.js and AngularJS can appear in the same older web stack, yet they sit on opposite sides of the browser boundary because Node.js runs JavaScript on the server and AngularJS organizes a browser interface. Node.js and AngularJS solve different jobs…
A publication-day check found that the hosted AI worker returned HTTP 503 for a minimal function. The free unit test generator below therefore uses browser-local text rules, labels its limits, and creates runnable skipped scaffolds without sending your code to…
An online AI bug finder can provide contextual feedback, but sending unpublished source to an unknown service is a poor default. The checker below takes a narrower approach by scanning the text inside your browser for common security smells without…
