23 focused tools for passwords, encryption, hashing, and everyday online security — every single one runs entirely in your browser. Nothing you type is ever sent to a server.
Every tool below runs 100% client-side in JavaScript — no server ever sees your input.
Create strong, random, unpredictable passwords instantly with full control over length and character sets.
Open tool →Analyze any password's real-world strength, estimated crack time, and get concrete tips to improve it.
Open tool →Encrypt or decrypt any text using strong AES-GCM encryption with a passphrase, entirely in your browser.
Open tool →Generate MD5, SHA-1, SHA-256, and SHA-512 hashes from any text instantly, right in your browser.
Open tool →Convert text to Base64 encoding or decode Base64 strings back to readable text, instantly.
Open tool →Generate live Time-based One-Time Password (TOTP) codes from any secret key, just like Google Authenticator.
Open tool →Quickly check whether a website loads over HTTPS and get plain-language tips on certificate best practices.
Open tool →Check if a password has appeared in known data breaches using the k-anonymity Pwned Passwords API.
Open tool →Validate an IP address, identify its type (public/private/reserved), and understand what it means.
Open tool →Check your browser for WebRTC IP leaks that can expose your real IP address even while using a VPN.
Open tool →Create an encrypted note and share a private link that self-destructs after being viewed once.
Open tool →Turn any text, password, or link into a scannable QR code image you can download and share.
Open tool →Generate secure random numeric PINs of any length, ideal for ATM PINs, app locks, and device codes.
Open tool →Check whether a credit or debit card number passes the Luhn checksum algorithm and identify its card network.
Open tool →Generate a distorted image CAPTCHA to test how well humans and bots can read it, right in your browser.
Open tool →Scan a URL for common brand-impersonation and phishing red flags using client-side heuristic analysis.
Open tool →Scan a URL's structure for patterns commonly associated with malware distribution and unsafe downloads.
Open tool →Upload any file to compute its SHA-256 hash locally and compare it against a published checksum.
Open tool →A simple browser-based password vault: store, encrypt, and retrieve credentials locally with a master password.
Open tool →Encrypt any file with a passphrase into a downloadable .enc file, or decrypt one back to the original file.
Open tool →Decode a JSON Web Token (JWT) to inspect its header and payload contents, entirely in your browser.
Open tool →Generate a strong, memorable, word-based passphrase using the Diceware method, ideal as a master password.
Open tool →Paste raw HTTP response headers to check for missing security headers like CSP, HSTS, and X-Frame-Options.
Open tool →
Idiot Security Tools