Skip to main content
Tool Cluster

Security & Privacy

Privacy-first cryptographic tools. Generate secure passwords, compute hashes, inspect JWTs, view PGP keys, and encrypt text locally using WebCrypto APIs.

Available Security & Privacy Utilities

Browse 43 browser-based tools with local processing when supported.

Bcrypt Hasher & Verifier

Generate and verify salted Bcrypt hashes with adjustable cost rounds for developer testing. 100% private client-side execution with zero server logs.

BIMI Previewer

Inspect BIMI DNS records, audit DMARC enforcement prerequisites, validate SVG Tiny P/S compliance, and preview branded inbox avatar rendering.

Browser Fingerprint

Audit your unique hardware and software identity for tracking vectors, canvas rendering entropy, and browser privacy leaks.

Clipboard Cleaner

Sanitize clipboard text, strip invisible zero-width watermarks and RTLO characters, remove URL tracking, and wipe clipboard memory.

Cookie Security Auditor

Audit HTTP cookie strings for SameSite, Secure, HttpOnly, and RFC 6265bis compliance. Identify privacy leaks and security flaws in browser sessions.

CSP Generator

Build, audit, and export hardened Content Security Policy Level 3 headers to protect web applications from XSS and clickjacking attacks.

Data Leak Self-Check & Secret Scanner

Scan text snippets, code, and logs for exposed API keys, private keys, AWS tokens, and sensitive credentials with automated client-side redaction.

Data Redaction

Anonymize text, logs, and sensitive customer data by redacting emails, phone numbers, credit cards, IP addresses, and custom regex patterns.

Disposable Email Checker

Detect disposable and temporary email addresses, audit throwaway domains, and verify mail routing in your browser with zero external API dependencies.

Email Deliverability Tester

Audit domain email deliverability by verifying MX records, SPF syntax, DMARC policies, and DKIM alignment to prevent message bounce and spam flags.

Email Header Analyzer

Parse raw email headers locally to inspect relay hop latencies, sender IP addresses, SPF, and DKIM authentication results with zero data transmission.

Email Security Analyzer

Analyze MTA-STS, TLS-RPT, SPF, and DMARC DNS policies to validate domain-level email transport encryption and defense against man-in-the-middle attacks.

Encrypted Secure Notes

Encrypt secret notes, passwords, and sensitive text locally with zero-knowledge AES-256-GCM encryption and PBKDF2 key derivation.

Password Entropy Calculator

Calculate password entropy and crack time in bits. Test mathematical brute-force resistance across character sets with 100% offline client-side privacy.

File Checksum Verifier

Verify file integrity and detect tampering by calculating SHA-256, SHA-1, and MD5 hashes directly in your browser with client-side Web Crypto APIs.

File Encryption

Securely encrypt or decrypt any file locally in your browser using high-security AES-GCM 256-bit encryption. Zero file uploads or password logging.

File Hash Generator

Generate cryptographic checksums (SHA-256, SHA-512, MD5) for local files to verify file integrity and detect tampering with zero server uploads.

Hash Generator

Compute cryptographic hash digests for text strings across SHA-256, SHA-512, SHA-1, and MD5 algorithms with instant hexadecimal and Base64 output.

Hash Verifier

Verify if a plain text string matches an expected cryptographic hash digest (SHA-256, SHA-512, MD5) with color-coded integrity confirmation.

HMAC Generator

Generate secure HMAC signatures using secret keys across SHA-256, SHA-512, and SHA-1 algorithms for API authentication and webhook validation.

Image Steganography

Conceal confidential messages, credentials, and encrypted text inside lossless image pixel buffers using Least Significant Bit (LSB) steganography.

IP Lookup & Location

Inspect public and private IPv4 and IPv6 addresses, resolve reverse DNS pointers, compute mathematical encodings, and analyze ASN routing.

JWT Debugger

Decode, inspect, verify, and generate RFC 7519 JSON Web Tokens in your browser with HMAC and RSA signature validation and local claim analysis.

JWT Header Inspector

Audit JSON Web Token JOSE headers for security vulnerabilities, algorithm confusion, and RFC 8725 compliance in your browser.

MX Blacklist Checker

Audit mail server IP addresses and domain MX records against major DNS-based blacklists to troubleshoot deliverability and spam listings.

Password Strength Checker

Evaluate password complexity, bit entropy, and estimated brute-force crack times with local heuristic analysis. Zero network calls or password storage.

PGP Key Generator

Generate RFC 4880 and RFC 9580 compliant OpenPGP keypairs directly in your browser with Ed25519 ECC, RSA 4096, and revocation certificates.

PGP Key Viewer

Inspect and verify OpenPGP public keys online. View 40-character fingerprints, subkeys, encryption algorithms, and expiry dates with 100% client-side privacy.

Privacy Policy Checklist

Audit website and application privacy policies against GDPR, CCPA, DPDP, and CalOPPA standards with interactive criteria and automated clause scanning.

Privacy Score Calculator

Calculate a transparent, deterministic privacy health score and risk grade for your project based on data telemetry, tracking, and encryption standards.

Pwned Password Checker

Verify password exposure in public data breaches using Have I Been Pwned's zero-knowledge k-anonymity API model without revealing your password.

Random Token Generator

Generate cryptographically secure random tokens, API keys, hex strings, and alphanumeric secrets using the Web Crypto API for app development.

RSA Key Pair Generator

Generate cryptographically secure RSA public and private keypairs in your browser with PKCS#8, SPKI, and JWK multi-target export and zero server telemetry.

Secure Password Generator

Generate strong, randomized passwords using the browser Web Crypto API. Customize length, uppercase, symbols, and avoid ambiguous characters.

Passphrase Generator

Generate strong, memorable passphrases using cryptographic Diceware wordlists. Fully client-side with customizable word counts, separators, and capitalization.

Shamir Secret Sharing

Split sensitive passphrases into N cryptographic shares requiring a threshold of K shares to reconstruct using information-theoretic GF(256) algebra.

SPF DKIM DMARC Checker

Audit domain SPF, DKIM, and DMARC DNS records to verify email security posture, detect spoofing risks, and optimize deliverability settings.

SRI Hash Generator

Generate Subresource Integrity (SRI) hashes (sha384, sha512) for CDN scripts and stylesheets to safeguard web applications against script tampering.

SSH Key Generator

Generate OpenSSH-compatible public and private keypairs in your browser for secure server authentication with Ed25519, RSA 4096, and ECDSA support.

SSL Certificate Generator

Generate valid X.509 v3 self-signed TLS certificates, Certificate Signing Requests (CSR), and RSA private keys locally with multi-domain SAN support.

Text Encryption

Encrypt and decrypt confidential text snippets and messages using client-side AES-GCM 256-bit encryption. Safe, private, and browser-contained.

TOTP Simulator

Generate, simulate, and verify RFC 6238 Time-Based One-Time Passwords in your browser with multi-window drift testing and zero server transmission.

Tracking Parameter Scanner

Scan URLs for analytics identifiers, UTM tags, and cross-site tracking parameters. Strip click IDs and clean URLs locally.

Domain Overview

How Security & Privacy Work

Provide cryptographically secure password generation, SSH key generation, PGP key viewing/creation, hash generation/verification, JWT inspection, entropy calculation, and local file encryption.

By executing processing routines directly inside your web browser using client-side JavaScript, WebWorkers, and WebAssembly, tools process tasks without waiting for remote server queues or external APIs.

Core Processing Standards

  • Browser Processing: All cryptographic keys, passwords, hashes, JWT tokens, and security audits execute 100% locally in your browser using W3C WebCrypto APIs. Zero secrets, tokens, or credentials are ever transmitted over the network.
  • Off-Main-Thread Execution: Heavy transformations process in background workers to keep UI smooth and responsive.
  • Offline Capability: Core tool functions operate directly in your browser without an active internet connection.

High-Value Use Cases

  • Generate cryptographically strong passwords, passphrase combinations, and high-entropy random keys
  • Inspect and decode JSON Web Tokens (JWT), verify header algorithms, and validate expiration timestamps
  • Compute cryptographic file checksums and string hashes (SHA-256, SHA-512, MD5, SHA-1, Keccak) in browser memory
  • Audit browser security headers (CSP, CORS, Cookies), detect tracker fingerprinting, and scan text for data leaks
Companion Tool Guide

Zero-Log Architecture: Verifying Client-Side Privacy in Modern Web Tools

How zero-log architecture works, how to audit network requests in developer tools, and why browser-based cryptography ensures sovereign data privacy.

Read Tool Guide
Recommended Task Pipelines

Common Security & Privacy Workflows

Follow step-by-step browser processing sequences to complete tasks efficiently without remote server reliance.

Cryptographically Secure Credential Generation

Create impenetrable passwords, passphrases, and encryption keys backed by hardware entropy.

  1. 1 Open Password Generator or Secret Key Generator
  2. 2 Configure key length (16 to 128 characters) and character sets (uppercase, lowercase, numbers, symbols)
  3. 3 Inspect calculated Shannon entropy bits and brute-force cracking resistance metrics
  4. 4 Toggle ambiguous character exclusion (O vs 0, l vs 1) for physical readability
  5. 5 Copy credentials directly to clipboard with automated zero-persistence clearing

JWT Token Inspection & Claims Verification

Decode, inspect, and validate JSON Web Tokens without exposing authentication tokens to external servers.

  1. 1 Paste authorization JWT token into JWT Decoder
  2. 2 Inspect decoded JOSE Header (alg, typ) and Payload claims (sub, iss, exp, iat, aud)
  3. 3 Verify expiration time relative to current local UTC time with color-coded status badges
  4. 4 Paste public key or secret to perform client-side signature cryptographic verification
  5. 5 Review raw JSON claims structure for debugging authentication microservices

Cryptographic Checksum & Hash Verification

Verify software download integrity and compute cryptographic hashes for files and text strings.

  1. 1 Drag and drop software installer or paste text string into Hash Generator or Bcrypt Hasher
  2. 2 Select target cryptographic hash algorithm (SHA-256, SHA-512, SHA-3, MD5, RIPEMD)
  3. 3 Client-side WebCrypto engine computes binary digest without file uploading
  4. 4 Paste manufacturer published checksum to run automated side-by-side integrity match validation
  5. 5 Copy verified hexadecimal hash digest strings for security verification

Browser Privacy & Fingerprint Auditing

Inspect browser exposure attributes, evaluate tracker defenses, and generate Content Security Policies.

  1. 1 Navigate to Browser Fingerprint or Cookie Security Auditor
  2. 2 Inspect system exposure vectors (Canvas fingerprint, WebGL renderer, AudioContext, screen metrics)
  3. 3 Use CSP Generator to construct strict Content-Security-Policy header directives
  4. 4 Audit text payloads for accidental secret leaks using Data Leak Self-Check & Secret Scanner
  5. 5 Export hardened HTTP security headers ready for deployment
Browser-Native Execution Architecture

W3C WebCrypto SubtleCrypto Subsystem

Cryptographic hash generation (SHA-256, SHA-512) and random entropy generation utilize the browser's hardware-backed window.crypto.subtle engine, ensuring resistance against timing attacks.

Client-Side Constant-Time Comparison

Hash and checksum verification routines utilize constant-time string comparison algorithms to prevent side-channel timing analysis attacks when verifying authentication tokens.

WebAssembly Bcrypt & Argon2 Kernels

Computationally intensive password hashing and verification algorithms (Bcrypt, Argon2) run inside isolated WebAssembly instances with configurable work-factor salt rounds.

Practical Boundaries & Browser Considerations

Ephemeral In-Memory Lifecycle

All generated credentials and decoded tokens exist solely in volatile browser RAM. Once the tab is closed, uncopied credentials are permanently lost by design to ensure security.

Browser Sandboxing & Hardware Security Modules

Web tools operate within browser security sandboxes. They cannot communicate with OS kernel-level TPM/HSM smartcards or native hardware security dongles without browser extension bridges.

Network Connectivity in Deliverability Testing

Tools like Email Deliverability Tester query public DNS-over-HTTPS resolvers for SPF, DKIM, and DMARC records; they do not send live test emails to recipient inboxes.

Frequently Asked Questions

Common Questions About Security & Privacy

Technical specifications, privacy principles, and usage guidance for browser-native execution.

Is it safe to paste production JWT tokens or API secrets into this tool?
Yes. Unlike many online JWT decoders that log tokens or transmit them to remote servers, our JWT Decoder and security tools operate 100% locally inside your web browser. Open your browser's Developer Tools Network tab to verify that zero network requests are made.
How are passwords generated cryptographically?
Passwords are generated using the browser's native window.crypto.getRandomValues() method, which draws entropy directly from your operating system's cryptographic random pool (e.g., /dev/urandom on Linux/macOS, CryptGenRandom on Windows).
What is the difference between SHA-256 and Bcrypt?
SHA-256 is a fast cryptographic hash designed for data integrity verification and digital signatures. Bcrypt is a slow, computationally intensive key-derivation function with configurable salt rounds specifically designed to resist hardware brute-force attacks on passwords.
How does the Data Leak Self-Check & Secret Scanner work?
The scanner inspects text, code, or log files locally against hundreds of deterministic regular expression patterns representing private keys, AWS access tokens, GitHub PATs, Slack webhooks, and private database credentials.
Can I verify large file checksums without waiting for long uploads?
Yes! Because the Hash Generator reads files locally using the HTML5 File API and WebCrypto, a multi-gigabyte file is read directly from your local disk at high speeds without uploading a single byte to the internet.