🔐 Security & Privacy Tools
25 free tools, all running in your browser. No sign-up.
🔐 Password Generator
Generate strong random passwords with configurable length and character sets, using the Web Crypto API's CSPRNG with unbiased rejection sampling and a live entropy estimate.
Open Tool →🔐 Passphrase Generator (Diceware-Style)
Generate memorable Diceware-style passphrases from a built-in word list, with configurable word count, separator, capitalization and a live entropy estimate.
Open Tool →🔐 Password Strength Estimator
Estimate password strength locally using pattern-based heuristics — length, variety, keyboard walks, repeats and a small built-in common-password list — with a rough crack-time table.
Open Tool →🔐 PIN Generator
Generate random numeric PINs of 4 to 12 digits, with an option to avoid obviously weak patterns like repeated digits, sequences and common PINs.
Open Tool →🔐 Random Token Generator
Generate cryptographically random tokens, shown at once in hex, Base64, Base64url and a URL-safe alphanumeric encoding — configurable byte length.
Open Tool →🔐 SRI Hash Generator
Generate Subresource Integrity (SRI) hashes for JS or CSS files — SHA-256/384/512 — with ready-to-use integrity attribute values.
Open Tool →🔐 UUID Collision Probability Calculator
Calculate the approximate probability of a UUID v4 collision using birthday-paradox math, with illustrative presets and a free-input calculator.
Open Tool →🔐 HMAC Verifier
Verify whether a provided HMAC signature matches a message and secret key, using SHA-1, SHA-256, SHA-384 or SHA-512.
Open Tool →🔐 AES Encrypt & Decrypt Text
Encrypt or decrypt a text snippet with AES-GCM, using a passphrase-derived key (PBKDF2, random salt and IV) — the key never leaves your browser.
Open Tool →🔐 RSA Key Pair Generator
Generate an RSA key pair (2048/3072/4096-bit) and export it as PEM — for learning and testing, not production secrets.
Open Tool →🔐 Base32 & Base58 Converter
Encode or decode text/hex to and from Base32 (RFC 4648) and Base58 (Bitcoin alphabet).
Open Tool →🔐 TOTP Generator
Generate a TOTP secret and watch the live 6-digit authenticator code (RFC 6238), or paste an existing Base32 secret to preview its codes.
Open Tool →🔐 SSH Public Key Format Converter
Convert an RSA or EC public key between PEM (SPKI) and OpenSSH format, both directions. Public keys only.
Open Tool →🔐 .htpasswd Generator
Generate an Apache .htpasswd line from a username and password, using APR1-MD5 or {SHA} SHA-1.
Open Tool →🔐 JWT Signer & Verifier
Build and sign a JWT with an HMAC secret (HS256/384/512), or verify a token's signature and expiry — for local testing only.
Open Tool →🔐 CSP Header Builder
Build a Content-Security-Policy header interactively — toggle directives, add source values, and get the exact header string.
Open Tool →🔐 Security Headers Checklist
Paste raw HTTP response headers and get a pass/warn/fail scorecard against key security headers like CSP, HSTS and X-Frame-Options.
Open Tool →🔐 GDPR Cookie Banner Generator
Configure a simple cookie-consent banner and get a copy-paste-ready HTML/CSS/JS snippet with a live, working preview.
Open Tool →🔐 robots.txt Checker & Linter
Paste a robots.txt file and test whether a URL path is allowed or disallowed for a given user-agent, with basic linting.
Open Tool →🔐 Unix/Linux File Permissions Calculator
Convert file permissions between numeric (chmod) and symbolic (rwxr-xr-x) form, both directions, with setuid/setgid/sticky bit support.
Open Tool →🔐 Filename & URL Slug Sanitizer
Turn any string into a safe filesystem filename and a safe URL slug at the same time.
Open Tool →🔐 Email Syntax Validator
Check whether an email address's syntax is valid per RFC 5321/5322 shape rules — not a deliverability check.
Open Tool →🔐 Credit Card Format Validator
Check a credit card number's format only — Luhn checksum and network identification — with a fake test-number generator. Never checks real cards.
Open Tool →🔐 Committed-Secret Scanner
Paste a git diff or plain text and scan line-by-line for patterns that commonly indicate an accidentally-committed secret.
Open Tool →🔐 Self-Destruct Note (In-Memory Demo)
A same-tab demo of the one-time-reveal UX pattern: seal a note in memory, then reveal it exactly once. No network transmission or storage.
Open Tool →