Security Tools
27 tools available. All free, all private.
Generate strong passwords, create QR codes, compute file hashes, and encrypt data — all using cryptographically secure browser APIs. No passwords or keys ever leave your device. Built on the Web Crypto API for true security.
When to Use Security Tools
- Generating cryptographically secure passwords and passphrases
- Creating QR codes for URLs, WiFi, vCards, and more
- Computing MD5, SHA-256, SHA-512 hashes of text or files
- Scanning and reading QR codes from images
- Generating and verifying TOTP/OTP codes
Popular Security Tools
Password Strength Checker
Test password strength with entropy and crack time estimates
QR Code Scanner
Scan QR codes from camera or uploaded images
AES Encrypt/Decrypt
Encrypt and decrypt text with AES-GCM — password-based
File Hash Checker
Check file hashes — SHA-256, SHA-512 and verify integrity
OTP Generator
Generate secure OTPs — numeric, alphanumeric, or hex
Barcode Generator
Generate barcodes — Code128 with PNG download
RSA Key Generator
Generate RSA key pairs — 2048/4096 bit PEM export
TOTP Generator (2FA)
Generate TOTP 2FA codes — countdown timer with auto-refresh
Bcrypt Hash Generator
Generate and verify bcrypt hashes — adjustable cost factor
Barcode Scanner
Scan barcodes from images — QR, EAN, Code128 support
Steganography Tool
Hide text in images — LSB encoding and decoding
SSL Certificate Checker
Check SSL certificate status — verify HTTPS connectivity
.htpasswd Generator
Generate .htpasswd entries — SHA1 and bcrypt hashing
Base32 Encoder/Decoder
Encode and decode Base32
CSP Header Generator
Build CSP headers visually
CSR Generator
Generate CSR information
DKIM Record Generator
Generate DKIM DNS records
Encryption Strength Analyzer
Analyze password and key strength
PGP Key Viewer
View PGP public key details
SHA-256 Hash Generator
Generate SHA-256 hashes
SPF Record Generator
Build SPF DNS records
SRI Hash Generator
Generate SRI integrity hashes
XSS Test Sandbox
Learn XSS prevention with sandbox
API Key Format Validator
Validate API key formats — never contacts any API