Security (type-7, hashes, host keys)

What it does: three security checks in one place.

• Cisco type-7 decode — recovers the plaintext from a "password 7 ..." / "key 7 ..." config value. Type 7 is reversible obfuscation, NOT encryption, so treat any type-7 string as if it were the clear password. (Type 8/9 are one-way hashes and can't be decoded — use the Hash tab to watch those instead.)
• Hash verify & watch — compute MD5/SHA-1/SHA-256/SHA-512 of a file or text. Paste a vendor's published checksum to confirm a downloaded IOS image isn't corrupt or tampered, or baseline a config and re-check later to catch a change.
• SSH host keys — read a device's host-key fingerprint (no login needed) and remember it. On a later check a changed fingerprint is flagged: it means the key was legitimately rotated/rebuilt, or someone is intercepting the session (man-in-the-middle). Accept the new key only if you know why it changed.

Safe to run: yes — all three are read-only/local. Type-7 decode and hashing never touch the network; the host-key check makes a single SSH handshake and disconnects.

Reading results: green/✓ = matches the baseline; red = changed or mismatched. A changed file hash or host key is a prompt to investigate, not proof of attack on its own.