Security Tools
Password generation and file integrity checking tools.
Password Generator
Generate strong random passwords and diceware passphrases in your browser. Entropy meter, crack-time estimate, strength checker. Nothing is uploaded.
File Hash Checker
Calculate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 checksums of any file in your browser and verify downloads instantly. Files are never uploaded.
Two tools where "runs in your browser" is not a convenience but the entire point. The Password Generator creates cryptographically secure random passwords and memorable diceware passphrases using the Web Crypto API — the same randomness source browsers use for encryption itself, never a predictable function like Math.random. It shows the entropy of what it generates and includes a strength checker for auditing passwords you already use. The File Hash Checker computes a file's cryptographic hash so you can verify a download against the checksum its publisher lists — the standard way to confirm a file wasn't corrupted in transit or tampered with on a mirror.
A password generator that sends passwords to a server would be worse than useless, and a hash checker that uploads your files defeats its own purpose. Both tools therefore do all their work locally: nothing you generate, type or load here is ever transmitted, stored or logged. You can load either page, go offline, and keep working.
They're built for anyone setting up accounts, securing a router or WiFi network, downloading installers from mirrors, or simply replacing one reused password with proper unique ones — no security expertise assumed.
Frequently asked questions
Is an online password generator actually safe to use?
This one is, because it never behaves like an online service — passwords are generated on your device with the Web Crypto API and are never transmitted, stored or logged. You can load the page, disconnect from the internet, and generate passwords entirely offline.
What's the difference between a random password and a passphrase, and which should I use?
A random password (16+ mixed characters) is strongest for accounts stored in a password manager. A diceware passphrase — several random words joined together — is easier to remember and type, making it the better choice for master passwords and WiFi keys.
How do I check if a downloaded file is genuine or corrupted?
Load the file into the File Hash Checker and compare the computed hash against the checksum published on the official download page. If the two match, the file is byte-for-byte identical to what the publisher released; if not, re-download — and avoid running it.
Does checking a file's hash upload the file anywhere?
No. The hash is computed in your browser as the file is read locally, so even multi-gigabyte files are never uploaded. Only you ever see the file or its hash.