Password, hashing & everyday security utilities
Generate strong passwords and passphrases, check password strength, and produce MD5, SHA, and HMAC hashes — free, fast, and built to run entirely in your browser.
What are security tools?
Security tools cover the small, everyday tasks that keep accounts and data safe — generating a strong password before creating a new account, checking whether an existing password is actually strong enough, or producing a hash to verify a file hasn't been tampered with. These aren't tasks that call for installed software or a trip to a password manager's settings menu; they call for a page that generates or checks something correctly, once, without asking for anything in return.
Every tool in this collection runs using the browser's built-in Web Crypto API and cryptographically secure random number generation — not a custom, unverified implementation. The password generator and passphrase generator use crypto.getRandomValues() rather than a predictable pseudo-random function, and the MD5, SHA-256, SHA-512, and HMAC generators compute real cryptographic digests locally, the same way a backend script would, just without leaving the browser tab.
Who uses these tools, and for what
Anyone creating a new account reaches for the password generator to get something genuinely random rather than a predictable variation of an old password, and the password strength checker to confirm it holds up before submitting it. Developers use the MD5 and SHA256/SHA512 hash generators to verify file integrity or generate checksums, and the HMAC generator when building or debugging signed API requests. Anyone who prefers a password they can actually remember without sacrificing entropy uses the passphrase generator, which strings together random dictionary words instead of a jumble of symbols.
Why they're free, fast, and private by default
A security tool that doesn't take security seriously defeats its own purpose — a password generated on a server that logs the request isn't actually private, and a hash computed by uploading a sensitive file somewhere first isn't actually safe. Every tool here runs entirely client-side: passwords are generated and hashes are computed in the browser tab only, nothing is transmitted to a server, and nothing is stored once the tab closes. That also means there's no network delay standing between typing something in and seeing a trustworthy result.
That's the standard every tool in this category is held to — free, instant, and genuinely private, not just labeled that way. New security tools are added here as they're built.