Free Payment Crypto Tools.

Decoded.

50+ cryptographic tools, an HSM simulator, and an AI assistant — everything payment engineers need to test, validate, and homologate against the standards. DUKPT, PIN blocks, EMV ARQC, TR-31, ISO 8583 and more, all running in your browser. Built for homologation, never for production data. No account. No payment. No tracking.

PCI Security Standards Council
Thales
ISO
EMVCo
ANSI
NIST
Visa
Mastercard
American Express
PCI Security Standards Council
Thales
ISO
EMVCo
ANSI
NIST
Visa
Mastercard
American Express
PCI Security Standards Council
Thales
ISO
EMVCo
ANSI
NIST
Visa
Mastercard
American Express
PCI Security Standards Council
Thales
ISO
EMVCo
ANSI
NIST
Visa
Mastercard
American Express
PCI Security Standards Council
Thales
ISO
EMVCo
ANSI
NIST
Visa
Mastercard
American Express
PCI Security Standards Council
Thales
ISO
EMVCo
ANSI
NIST
Visa
Mastercard
American Express
PCI Security Standards Council
Thales
ISO
EMVCo
ANSI
NIST
Visa
Mastercard
American Express
PCI Security Standards Council
Thales
ISO
EMVCo
ANSI
NIST
Visa
Mastercard
American Express
[ 03 ] Scope & safety

Built for homologation.
Not for production data.

KeyLab is a testing tool for engineers validating implementations against payment standards. Here's how to use it — and how not to.

[ 01 ]SYNTHETIC INPUTS · NO PROD SECRETS

Test data only

Use synthetic test vectors (e.g. PAN 4111111111111111). Never paste production PINs, PANs or live keys — PCI DSS forbids it, and so do we.

SCOPE/TESTING_ONLY · PCI_DSS_3.x · HOMOLOGATION
[ 02 ]NO BACKEND PROCESSING

Client-side by design

Even your test data stays in your browser. The server cannot see what you compute. You stay in control of what you paste.

KL/CRYPTO_RUNTIME · BROWSER_LAYER · ZERO_EGRESS
[ 03 ]AUDITABLE LIBRARIES

Open-source crypto

Built on @noble/curves, @noble/post-quantum and node-forge. Auditable, peer-reviewed. Inspect what runs before you trust it.

NPM/NOBLE_SUITE · NODE_FORGE · PEER_REVIEWED
[ 04 ]PCI · ISO · EMV · ANSI

Standards-compliant

ISO 9564, ANSI X9.24 (DUKPT), PCI DSS, EMV, TR-31 / X9.143. The specs you already audit, implemented faithfully so you can validate against them.

SPEC_LIB/ISO9564 · X924_DUKPT · TR31_X9143

Inspect the source. Run on test data. Validate. Then move it to your audited stack.

0+Cryptographic Tools
0HSM Commands
0Free Tools
ISO 9564Compliant
LEGACY TOOLS — BPTools (Circa 2008)_×
FileEditViewHelp
PIN Block
3DES
CVV
KEK
TLV
EMV
LMK
PVV
MAC
XOR
! Outdated Cipher Suite. Please upgrade.v3.04
Fake Error×
!

ERROR: Outdated Cipher Suite. Please upgrade.

OK

Cluttered. Slow. Expensive.

Annual License: $999/yr + maintenance fees

KeyLab

FAST. SECURE. FREE.

Built by engineers, for engineers.

Stop paying $999/yr
for tech from 2008
Get Started Free

Frequently Asked Questions

Everything you need to know about KeyLab and payment cryptography tools.

Thiago Alonso — Founder of KeyLab

Meet the Founder

Thiago Alonso

Founder & Creator of KeyLab

I've spent most of my career deep in the payment security stack — from HSM operations and key management to PCI compliance and cryptographic architecture. After years of working with tools that were either too expensive, too outdated, or simply frustrating to use, I built KeyLab: the platform I wished existed when I started.

KeyLab is built by someone who actually uses these tools daily. Every feature comes from real-world experience, not assumptions.

Nearly a decade in payment cryptography & compliance
HSM specialist — Thales payShield, Kryptus kNET
PCI DSS, PCI PIN, ISO 27001, NIST, FIPS, Common Criteria
Connect on LinkedIn
[ 09 ] Open a channel
Found a bug. Have an idea.
Want to collab.
[ TX/01 ] CONTACT_FORM

Encrypted in transit · No tracking · Max 2000 chars