Security & Privacy
Password generators, strength checkers, hashes, PINs — all local.
8 tools
Hot
Password Generator
Strong, random passwords
Security & PrivacyOpen →
Password Strength Checker
Test password quality
Security & PrivacyOpen →
Random Number Generator
Cryptographically secure random numbers
Security & PrivacyOpen →
Random String Generator
Random IDs / tokens / keys
Security & PrivacyOpen →
PIN Generator
Secure numeric PINs
Security & PrivacyOpen →
Dice Roller
Roll D4–D100
Security & PrivacyOpen →
Local Secure Notes
Notes encrypted in your browser
Security & PrivacyOpen →
Security Hash Generator
Hash text and files locally
Security & PrivacyOpen →
About Security & Privacy
A small set of focused privacy and security helpers: strong password generation, password-strength scoring, random numbers and PINs with the Web Crypto API, and AES-encrypted local notes. Every tool runs in your browser — nothing is ever phoned home.
Who it's for: Security-conscious users, IT admins, developers building auth flows, and anyone who needs to generate or check credentials in a hurry.
What you can do here
- All randomness uses window.crypto.getRandomValues — never Math.random
- Unbiased random integers via rejection sampling, not modulo bias
- Local secure notes encrypted with AES-GCM and PBKDF2 from your passphrase
- Password strength meter with entropy and crack-time estimates
- Cryptographic file checksums via Web Crypto (SHA-256/384/512)
Common use cases
- Generating a strong password or API key for a new account
- Verifying a downloaded file against the publisher's checksum
- Storing a one-off secret on a trusted device without using a SaaS
Frequently asked questions
Are the random numbers truly secure?
Yes — they come from the Web Crypto API, which exposes the operating system's cryptographic RNG. Rejection sampling ensures the distribution is unbiased even when the range isn't a power of two.
Do you store my passwords or notes?
Passwords and PINs are generated in memory and never stored. Secure Notes are AES-encrypted and saved only to localStorage on your device — clearing browser storage erases them.
Why isn't MD5 available for file hashing?
MD5 isn't a Web Crypto algorithm and a JavaScript implementation would be slow and memory-hungry on large files. SHA-256 is available and is what you should use for download verification anyway.