Security & Privacy

Weak and reused passwords are still the most common way accounts are broken into. The Password Generator builds long random passwords from the character types you choose, and the Password Strength Test shows why a password is weak or strong.

20 tools

Password Generator

Create strong random passwords with the length and character types you choose.

Password Strength Test

Rate a password and see which strength rules it meets or misses.

MD5 Generator

Create the MD5 checksum of any text, for comparing data and spotting changes.

SHA Generator

Hash text with SHA-256 or SHA-512 for integrity checks and signatures.

Bcrypt Generator

Create a salted bcrypt password hash for test data or configuration.

Hash Generator

Hash text with MD5, SHA-1, SHA-2, SHA-3, RIPEMD, Whirlpool and more.

UUIDv4 Generator

Generate random version 4 UUIDs for database keys and test data.

AES Encryption & Decryption

Encrypt and decrypt text with a passphrase using AES-256-GCM, entirely in your browser.

Secret Key Generator

Generate cryptographically secure keys: hex, Base64, Laravel APP_KEY, Django SECRET_KEY, UUIDs and more.

Content Security Policy Generator

Build a Content-Security-Policy header directive by directive, with report-only mode and ready-to-paste server snippets.

security.txt Generator

Create a security.txt file (RFC 9116) so researchers know how to report vulnerabilities to you.

Email Header Analyzer

Paste an email's headers to see SPF, DKIM and DMARC results, the route it took and delays at each hop.

IDN Homograph Checker

Check whether a domain uses lookalike letters from other alphabets to imitate a real brand.

WebRTC Leak Test

Check whether your browser reveals your real or local IP address through WebRTC, even behind a VPN.

Browser Fingerprint Test

See the details your browser reveals to every website, from screen and fonts to canvas and WebGL, that can be used to track you.

HTTP Methods Checker

See which HTTP methods a URL allows, and whether risky ones like TRACE are enabled.

WAF Detector

Find out which web application firewall, bot protection or security CDN protects a website.

CVE Lookup

Look up a CVE vulnerability by ID, or find the latest CVEs for any product, with CVSS scores.

Htpasswd Generator

Create .htpasswd password lines for Apache and Nginx Basic Auth, with bcrypt, APR1-MD5 or SHA-1 hashes.

DNS Leak Test

Check whether your VPN or proxy leaks your DNS lookups to your internet provider. See which DNS servers you really use.

More about Security & Privacy

The hash generators turn any text into a fixed-length fingerprint. MD5 and SHA hashes are useful for checking that data has not changed, while bcrypt is the kind of slow, salted hash that should be used to store passwords. The UUID Generator creates random identifiers for databases and test data.

For websites, the CSP Generator and security.txt Generator write two files every site should have, the WAF Detector and HTTP Methods Checker show how a server is protected, the Open Port Checker tests whether a port is reachable from the internet, and the CVE Lookup finds known vulnerabilities in the software you run. AES Encryption and the Secret Key Generator work entirely in your browser, while the Email Header Analyzer, IDN Homograph Checker, WebRTC Leak Test and Browser Fingerprint Test help you spot phishing and privacy leaks.

To put a password on a staging site or a private folder, the Htpasswd Generator creates bcrypt or APR1 password lines for Apache and Nginx Basic Auth, with the configuration to paste.

The DNS Leak Test shows which DNS servers your browser really uses, so you can check that your VPN is not leaking your browsing to your internet provider.

Guides for these tools

How to Create a Genuinely Strong Password (And What Sites Do With It) What actually makes a password hard to crack, why length beats complexity, and how sites store passwords safely using hashing.