Free online security and privacy tools

Measures the Shannon entropy of data to hint at encryption or compression.

Generates a PGP key pair for a name and email in the browser.

Generates an RSA public and private key pair in PEM, JWK or DER format.

Generates a time-based one-time password from a secret.

Computes an HMAC using a key and a chosen hash function.

Computes and checks Luhn checksums, as used in card numbers.

Tries to detect the encodings and operations that turn encoded input into readable output.

Decodes a certificate signing request.

Decodes a PEM or DER X.509 certificate into readable fields.

Applies the ROT13 substitution cipher with adjustable rotation.

Derives a key or hash from input using scrypt.

XORs data with a key given as hex, text or Base64.

Generates secure hex, Base64 and passphrase secrets and estimates their entropy.

Generates and checks HMAC-SHA256/384/512 signatures using Web Crypto.

Paste response headers to check Content-Security-Policy, Strict-Transport-Security, CORS and cookie attributes; no live request is made.

Produces strong passwords or word-based passphrases, several at once, using the browser's secure random source.

Looks through snippets, log output or environment files for leaked credentials and masks what it finds, all in the page.

Reads a certificate in PEM or DER form in the browser and lists who it was issued to and by, its dates, alternate names and hashes.

Rates a password and estimates how long a brute-force attack would take, without sending it anywhere.

Masks names, addresses, emails, phone numbers and IDs across 27 languages with a model that runs in the browser.

Displays the hidden data inside JPEG and PNG photos, such as GPS position and camera details, and exports copies without it.

Applies the ROT13 letter substitution cipher to text.

Encrypts a message with a passphrase using browser crypto and produces a link that only decrypts with that passphrase.

Blurs faces and strips metadata from a photo locally, then saves a clean copy.