Free TLS Cipher Suite Reference
Browse 25+ TLS cipher suites with security ratings (Recommended/Secure/Weak/Insecure), PFS support, and TLS version filters. Check your site with SSL Labs.
TLS Cipher Suite Reference
Browse and filter 25+ TLS cipher suites with security ratings, PFS status, and version info.
Security
TLS Version
Showing 25 of 25 suites
| Name | TLS | Key Exchange | Encryption | Security | PFS |
|---|---|---|---|---|---|
| TLS_AES_256_GCM_SHA384 | TLS 1.3 | ECDHE | AES-256-GCM | Recommended | Yes |
| TLS_AES_128_GCM_SHA256 | TLS 1.3 | ECDHE | AES-128-GCM | Recommended | Yes |
| TLS_CHACHA20_POLY1305_SHA256 | TLS 1.3 | ECDHE | ChaCha20-Poly1305 | Recommended | Yes |
| TLS_AES_128_CCM_SHA256 | TLS 1.3 | ECDHE | AES-128-CCM | Recommended | Yes |
| TLS_AES_128_CCM_8_SHA256 | TLS 1.3 | ECDHE | AES-128-CCM-8 | Recommended | Yes |
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | TLS 1.2 | ECDHE | AES-256-GCM | Recommended | Yes |
| TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 | TLS 1.2 | ECDHE | AES-256-GCM | Recommended | Yes |
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 | TLS 1.2 | ECDHE | AES-128-GCM | Recommended | Yes |
| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | TLS 1.2 | ECDHE | AES-128-GCM | Recommended | Yes |
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | TLS 1.2 | ECDHE | ChaCha20-Poly1305 | Recommended | Yes |
| TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 | TLS 1.2 | DHE | AES-256-GCM | Secure | Yes |
| TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 | TLS 1.2 | DHE | AES-128-GCM | Secure | Yes |
| TLS_RSA_WITH_AES_256_GCM_SHA384 | TLS 1.2 | RSA | AES-256-GCM | Secure | No |
| TLS_RSA_WITH_AES_128_GCM_SHA256 | TLS 1.2 | RSA | AES-128-GCM | Secure | No |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 | TLS 1.2 | ECDHE | AES-256-CBC | Secure | Yes |
| TLS_RSA_WITH_AES_256_CBC_SHA256 | TLS 1.2 | RSA | AES-256-CBC | Weak | No |
| TLS_RSA_WITH_AES_128_CBC_SHA256 | TLS 1.2 | RSA | AES-128-CBC | Weak | No |
| TLS_RSA_WITH_3DES_EDE_CBC_SHA | TLS 1.2 | RSA | 3DES-EDE-CBC | Weak | No |
| TLS_RSA_WITH_AES_256_CBC_SHA | TLS 1.1 | RSA | AES-256-CBC | Insecure | No |
| TLS_RSA_WITH_AES_128_CBC_SHA | TLS 1.1 | RSA | AES-128-CBC | Insecure | No |
| TLS_RSA_WITH_RC4_128_SHA | TLS 1.1 | RSA | RC4-128 | Insecure | No |
| TLS_RSA_WITH_RC4_128_MD5 | TLS 1.0 | RSA | RC4-128 | Insecure | No |
| TLS_RSA_WITH_DES_CBC_SHA | TLS 1.0 | RSA | DES-CBC | Insecure | No |
| TLS_RSA_EXPORT_WITH_RC4_40_MD5 | TLS 1.0 | RSA | RC4-40 | Insecure | No |
| TLS_NULL_WITH_NULL_NULL | TLS 1.0 | NULL | NULL | Insecure | No |
TLS Version Comparison
Current standard. All suites use AEAD encryption and perfect forward secrecy by default. Faster handshake.
Still widely used and acceptable when configured with strong ciphers. Avoid CBC and SHA-1 variants.
Deprecated in 2021 (RFC 8996). Should be disabled on all servers.
Deprecated. Vulnerable to POODLE and BEAST attacks. Must be disabled immediately.
Check Your Site's TLS
Enter a domain to test it with SSL Labs (opens in new tab).
Powered by Qualys SSL Labs
Frequently Asked Questions
How many cipher suites are included?
The tool includes 25+ cipher suites spanning TLS 1.0 through TLS 1.3 with security classifications.
What does PFS mean?
Perfect Forward Secrecy (PFS) means each session uses a unique key, so past sessions remain secure even if the server key is compromised.
Is it free?
Yes, completely free.
Is my data safe with this tool?
Absolutely. The TLS Cipher Suite Reference processes everything client-side in your browser. No data is uploaded to or stored on any server. Your content remains private on your device at all times.
Does the TLS Cipher Suite Reference work on mobile devices?
Yes, the TLS Cipher Suite Reference is fully responsive and works on smartphones and tablets. You can use it on any device with a modern web browser -- no app download required.
Do I need to create an account to use this tool?
No account or registration is needed. Simply open the TLS Cipher Suite Reference in your browser and start using it immediately. There are no sign-up walls or usage restrictions.
How do I use the TLS Cipher Suite Reference?
Simply enter your input in the provided field, adjust any settings to your preference, and the tool will process it instantly. You can then copy the result to your clipboard or download it.
Which browsers are supported?
The TLS Cipher Suite Reference works in all modern browsers including Chrome, Firefox, Safari, Edge, and Opera. For the best experience, use the latest version of your preferred browser.
Related Tools
Free Secure Password Generator
Generate secure, random passwords with customizable options. Free, fast, and works entirely in your browser with no sign-up required.
Free UUID/GUID Generator
Generate universally unique identifiers (UUIDs/GUIDs). Free, fast, and works entirely in your browser with no sign-up required.
Free QR Code Generator Online
Generate QR codes for URLs, text, WiFi credentials, and more. Free, fast, and works entirely in your browser with no sign-up required.
Free JSON Formatter & Validator
Format, validate, and beautify JSON data with syntax highlighting and error detection. Free, fast, and works entirely in your browser with no sign-up required.
About Free TLS Cipher Suite Reference
Free TLS Cipher Suite Reference is a free, browser-based tool in our Utility Tools collection. Everything runs locally on your device — no uploads, no sign-up, and your data stays private.