Security Tools
Generate strong passwords and check password strength, entirely on your device — nothing you type here is ever transmitted anywhere.
- Password Generator
Generate strong, random passwords with custom length and character sets. Free, private, generated entirely in your browser.
- Password Strength Checker
Check how strong your password is and get an estimated crack time, calculated entirely in your browser. Free and private.
- Passphrase Generator
Generate a strong, memorable passphrase made of random words. Free, private, generated entirely in your browser.
- Random Number Generator
Generate cryptographically secure random numbers within any range. Free, instant, and private.
- File Checksum
Calculate a file's MD5, SHA-1, and SHA-256 checksums and verify them against an expected value, entirely in your browser. Free, no upload.
- Basic Auth Header
Generate an HTTP Basic Authentication header from a username and password, entirely in your browser. Free, no upload.
- API Key Generator
Generate random API keys in hex or Base64URL format with an optional prefix, entirely in your browser. Free, no upload.
- 2FA Backup Codes
Generate a set of random 2FA backup codes to print or save securely. Free, runs entirely in your browser.
- CSP Generator
Build a Content-Security-Policy header from directives and sources. Free, instant.
- File Encryptor
Encrypt or decrypt a file with AES-256-GCM and a password, entirely in your browser. Free, no upload.
- Password Entropy
Calculate a password's entropy and estimated brute-force crack time. Free, instant, private.
- SRI Hash Generator
Generate SHA-256/384/512 Subresource Integrity hashes for a script or stylesheet. Free, instant.
- Security Headers Reference
Look up what common HTTP security headers do. Free, instant.
- PIN Generator
Generate cryptographically random numeric PIN codes. Free, instant, private.
- TOTP Generator
Generate a live TOTP (RFC 6238) 6-digit code from a base32 secret. Free, instant, private.
- HMAC Generator
Compute an HMAC-SHA1/SHA256/SHA512 of a message with a secret key. Free, instant, private.
- CORS Header Generator
Generate Access-Control-Allow-* response headers for CORS. Free, instant.
- CSP Analyzer
Analyze an existing Content-Security-Policy header for common risky patterns. Free, instant.
- Cookie Flag Checker
Check a Set-Cookie header for Secure, HttpOnly, and SameSite flags. Free, instant.
- Policy Checker
Check a password against a configurable length and character-type policy. Free, instant.
- Entropy to Length
Calculate the password length needed to reach a target entropy in bits. Free, instant.
- JWT Verifier
Verify an HS256 JWT's signature against a secret, entirely in your browser. Free, instant, private.
- TLS Cipher Reference
Look up whether a TLS cipher suite is considered strong, acceptable, or weak/deprecated. Free, instant.