Security Tools
Defensive utilities that run in your browser
Nothing you type below is sent to a server. These tools exist to help you check, understand and harden — never to attack.
Never submit secrets
Password strength checker
Runs entirely in your browser. Never paste a password you actually use.
Enter text to estimate strength.
Passphrase generator
Generated locally with your browser's cryptographic random source.
velvet-marble-willow-meadow-67
Base64 / URL encoder & decoder
Output appears here.
SHA-256 hash calculator
Useful for verifying file or text integrity. Computed locally.
Toolbox
The full defensive toolkit
Live utilities above; the remainder are guided checklists and reference explainers.
Password strength checker
Estimate resistance of a candidate passphrase — runs entirely in your browser.
Password generator
Generate long random passphrases and strings locally.
Base64 encoder / decoder
Encode or decode Base64 text for analysis.
URL encoder / decoder
Inspect percent-encoded parameters safely.
Hash identifier
Identify likely hash algorithms by length and format.
File hash calculator
Compute SHA-256 of a local file without uploading it.
URL safety checklist
Walk through the checks that expose a phishing link.
Security headers checklist
The response headers every site should set, and why.
HTTP header viewer
Understand what each response header tells you.
IP information lookup
Guidance on interpreting IP geolocation and ownership data.
DNS lookup
How to read A, MX, TXT, SPF, DKIM and DMARC records.
WHOIS information
Reading domain registration data during an investigation.
Email header analyzer
Trace a message's path and check SPF/DKIM/DMARC results.
JWT decoder
Decode the structure of a non-sensitive token you control.
Security checklist generator
Build a tailored hardening checklist for your situation.