Password Generator
Generate random passwords or word passphrases in your browser.
Security and Privacy tools
Helpers for keeping accounts and files in order. Create a strong password with the rules you need, or calculate a hash or checksum to confirm a file has not changed. Both run on your device, so a password or a file never leaves your browser.
40 tools in this part of the catalogue.
Featured Security and Privacy tools
Passwords2 tools
Password Generator
Generate random passwords or word passphrases in your browser.
Password Strength Checker
Get a local, dictionary-based estimate of a password's strength.
Hashing6 tools
Hash and Checksum Generator
Hash text or files and compare a supplied checksum.
HMAC Calculator
Sign a message with HMAC and verify a signature.
Subresource Integrity Generator
Generate SRI attributes from exact local bytes.
Checksum Manifest Verifier
Verify files against a checksum list.
Directory Snapshot Integrity Comparer
Compare local file hashes and recorded paths.
Local Merkle Proof Workbench
Build a file tree and verify an inclusion proof.
Security policies13 tools
CSP Generator and Pasted-Policy Checker
Draft a Content Security Policy from a strict baseline.
Security Headers Builder and Checker
Inspect pasted HTTP headers and check security fields.
Email Header Analyzer
Unfold message headers and read SPF, DKIM and DMARC.
CORS Header Builder and Explainer
Draft and explain an explicit CORS policy.
Cookie Header Explainer
Explain cookie attributes while masking values.
OAuth and OIDC Client Configuration Audit
Review declared OAuth client redirects and settings.
Referrer-Policy Disclosure Simulator
Model referrer disclosure for entered URLs.
Permissions-Policy Delegation Simulator
Model selected feature delegation to one iframe.
CSP Violation-Report Analyzer
Group supplied CSP reports with URL detail omitted.
Email Authentication Configuration Audit
Review supplied mail-auth records without DNS.
SSH Client Configuration Audit
Review supported SSH client options offline.
Access Permission Matrix Auditor
Review an entered role and permission matrix.
SBOM Inventory Comparator
Compare declared SBOM components and versions.
Privacy helpers9 tools
Sensitive Text Redactor
Mask sensitive text or chosen CSV columns.
Dataset Pseudonymizer
Replace selected identifiers in local CSV.
Suspicious URL and Homograph Inspector
Inspect a URL without opening its target.
OAuth Flow Helper and PKCE Explainer
Inspect authorization-code and PKCE inputs.
TOTP Code Generator
Generate one local authenticator code.
Local File Encryptor
Encrypt or restore one local file.
Offline Credential Reuse Audit
Find password reuse without exporting passwords.
Redaction Verification Report
Check listed terms remaining after text redaction.
Local Multi-File Secret-Pattern Scanner
Find secret patterns without showing matched values.
Public keys and certificates7 tools
PGP Public Key Inspector
Inspect public PGP packet metadata.
PEM Certificate and CSR Decoder
Read public certificate and CSR metadata.
Public JWK and JWKS Inspector
Inspect public JSON keys and calculate thumbprints.
Certificate Inventory and Expiry Report
Inventory public certificate dates and duplicates.
OpenSSH Public-Key and Authorized-Keys Inspector
Inspect public SSH keys and declared restrictions.
Known-Hosts Change Comparer
Compare recorded host-key pins without connecting.
WebAuthn Public Response Inspector
Decode public WebAuthn response metadata.
Signature verification2 tools
JWS Signature Verifier
Check JWS signatures with a supplied public key.
Detached Public-Key Signature Verifier
Verify exact bytes and a detached public-key signature.
More Security and Privacy tools
JWT Decoder and Claims Inspector
Read a JWT header and payload, with claims shown as dates.