Artifacts

Demo of the zxcvbn estimator that scores a password and lists the patterns and guesses it found.

Collection of password tools, including strength checking, generation and breach lookups.

Random password generator in plain JavaScript with no cookies or trackers.

Open source web app that stands in for a password manager without storing your passwords.

Client-side generator for passwords, API keys, UUIDs, JWT secrets and encryption keys.

Serverless password manager that works in the browser without a client install.

Hashes input with Argon2 using tunable memory, time and parallelism.

Hashes input with bcrypt using configurable rounds.

Neutralises URLs so they are not clickable when shared in reports.

Identifies a file's type from its byte signature.

Measures the Shannon entropy of data to hint at encryption or compression.

Generates a PGP key pair for a name and email in the browser.

Generates an RSA public and private key pair in PEM, JWK or DER format.

Generates a time-based one-time password from a secret.

Computes an HMAC using a key and a chosen hash function.

Computes and checks Luhn checksums, as used in card numbers.

Tries to detect the encodings and operations that turn encoded input into readable output.

Decodes a certificate signing request.

Decodes a PEM or DER X.509 certificate into readable fields.

Applies the ROT13 substitution cipher with adjustable rotation.

Derives a key or hash from input using scrypt.

XORs data with a key given as hex, text or Base64.

Builds random passwords in the browser with a React-based interface.

Checks how strong a password is and gives quick feedback on its robustness.