Security
Security tools that stay on your device.
Passwords, hashing, AES, TOTP, tracker cleaning, permissions, and more — processed locally. No uploads for processing.
Password generator
Strong passwords & passphrases.
Generate random passwords or memorable passphrases with crypto.getRandomValues — entirely in your tab.
Open tool →Security toolPassword strength
zxcvbn estimate, offline.
Estimate password strength with zxcvbn — crack-time hints without sending the password anywhere.
Open tool →Security toolHash calculator
MD5, SHA-1, SHA-256, and more.
Hash text or files with MD5 and Web Crypto SHA digests. Useful for checksums and fingerprints.
Open tool →Security toolAES encrypt / decrypt
AES-GCM with a passphrase.
Encrypt or decrypt text with AES-GCM. Key derived via PBKDF2 from your passphrase — all in Web Crypto.
Open tool →Security toolTOTP authenticator
Generate & verify 2FA codes.
Generate time-based one-time passwords from a base32 secret, or verify a code — standard 30s TOTP.
Open tool →Security toolURL tracker cleaner
Strip tracking query params.
Remove common tracking parameters (utm_*, fbclid, gclid, and more) from a URL before you share it.
Open tool →Security toolPermission auditor
See what this browser allows.
Query the Permissions API for camera, mic, notifications, geolocation, clipboard, and more.
Open tool →Security toolCookie inspector
Read document.cookie.
List cookies visible to JavaScript on this origin. HttpOnly cookies are invisible by design — we say so clearly.
Open tool →Security toolFile shredder
Overwrite bytes, then download.
Replace a file’s contents with random or zero bytes and download the shredded copy. Educational local wipe — not a secure erase of disk sectors.
Open tool →Security toolPassword leak check
Local list + optional HIBP.
Check against a bundled common-password list. Optionally query Have I Been Pwned’s k-anonymity API with only a SHA-1 prefix.
Open tool →Security toolHMAC sign / verify
SHA-256/384/512 MAC.
Create or verify an HMAC of a message with a shared secret using Web Crypto.
Open tool →Security toolFile checksum compare
SHA-256 two files.
Hash two files with SHA-256 and see if they match — integrity checks without uploading.
Open tool →