# Security & Privacy — CapyToolkit Blog

For the full blog, see: [Blog](https://capytoolkit.com/blog/)

[Post-Quantum TLS in 2026: What a Certificate Inspector Can and Cannot Tell You Yet](https://capytoolkit.com/blog/security-privacy/post-quantum-tls-certificate-inspector-can-and-cannot-tell-you/): Half the web negotiates post-quantum handshakes while certificates stay classical. Run a five-minute local audit to see where your domains stand.
[Where Your Text Goes When You Check It for AI: Six Detectors Compared](https://capytoolkit.com/blog/security-privacy/where-your-text-goes-when-you-check-it-for-ai-six-detectors-compared/): Six AI detectors compared on signup, free caps, price, and where your text is actually processed, plus how to read a 99% accuracy claim.
[Verifying Your FIDO2 Hardware Security Key: What a Browser Can Confirm](https://capytoolkit.com/blog/security-privacy/verifying-your-fido2-hardware-security-key-what-a-browser-can-confirm/): Verify your FIDO2 key is genuine with a browser-only routine: read its attestation chain, check fingerprint leaks, and test backup password strength.
[Auditing URLs Before You Share Them: Catching Tracking Tokens, API Keys, and Credential Leaks](https://capytoolkit.com/blog/security-privacy/auditing-urls-share-catching-tracking-tokens-api-keys-credential-leaks/): Catch tracking tokens, API keys, and credential leaks in URLs before you share them. A 30-second audit workflow using CapyToolkit's URL Parser.
[What Password Entropy Actually Means and Why Your Passwords Are Weaker Than You Think](https://capytoolkit.com/blog/security-privacy/what-password-entropy-means-why-passwords-weaker-than-you-think/): How Shannon entropy and zxcvbn pattern analysis expose the gap between perceived password strength and actual crack resistance.
[Percent-Encoding Rules Every API Developer Should Know, and When to Apply Them](https://capytoolkit.com/blog/security-privacy/url-encoder-decoder-capytoolkit-what-it-does-who-needs-it/): Percent-encoding rules for API developers: which characters need escaping, when to use encodeURIComponent, and how to fix unencoded-request failures.
[Parsing and Inspecting URLs Locally to Catch Tracking Parameters and Credential Leaks](https://capytoolkit.com/blog/security-privacy/parsing-urls-locally-catch-tracking-parameters-credential-leaks/): Decompose URLs into every component, inspect query strings for tracking tokens and leaked credentials, all without sending data to any server.
[Inspect X.509 Certificates Locally to Catch Expiry and Misconfigurations Before Deployment](https://capytoolkit.com/blog/security-privacy/inspect-x509-certificates-locally-catch-expiry-misconfigurations/): Inspect X.509 certificates in your browser without uploading. Read the full chain and catch expiry, weak keys, SHA-1 signatures, and misconfigurations.
[Sanitizing Kubernetes and Terraform Manifests Before Committing to Version Control](https://capytoolkit.com/blog/security-privacy/sanitizing-kubernetes-terraform-manifests-committing-version-control/): Scan Kubernetes and Terraform configs for secrets before committing. Detect hardcoded credentials and security smells, and generate sanitized manifests.
[A Client-Side Privacy Audit: What Your Browser Leaks and How to Clean It Before Sharing](https://capytoolkit.com/blog/security-privacy/client-side-privacy-audit-what-browser-leaks-how-clean-before-sharing/): Audit browser leaks, URL credential exposure, and hidden photo metadata with a client-side workflow. No uploads, no third parties.
[Offline OCR and Document Redaction for Privacy-Sensitive Workflows](https://capytoolkit.com/blog/security-privacy/offline-ocr-and-document-redaction-for-privacy-sensitive-workflows/): Redact sensitive information from documents using fully offline, browser-based OCR with zero uploads.
[Client-Side PII Detection and Scrubbing Before Sending Data to AI](https://capytoolkit.com/blog/security-privacy/client-side-pii-detection-and-scrubbing-before-sending-data-to-ai/): Detect and scrub sensitive data from AI prompts in your browser. No uploads, no cloud processing of your data, using CapyToolkit's free PII Scrubber.
[Social Media Privacy Workflow: Local EXIF Scrubbing, File Hashing, and Browser Leak Audits](https://capytoolkit.com/blog/security-privacy/social-media-privacy-workflow-local-exif-scrubbing-file-hashing-browser-leak-audits/): Learn to protect social media privacy with local EXIF scrubbing, file hashing, and browser leak audits via CapyToolkit's zero-upload tools.
[Auditing Browser Fingerprints and Privacy Leaks Without Transmitting Data](https://capytoolkit.com/blog/security-privacy/auditing-browser-fingerprints-privacy-leaks-transmitting-data/): Learn to audit browser fingerprints locally with CapyToolkit's client-side inspector, identifying privacy leaks without transmitting data to servers.
[Why Client-Side URL Parsing Prevents Credential Exposure Before Transmission](https://capytoolkit.com/blog/security-privacy/why-client-side-url-parsing-prevents-credential-exposure-transmission/): Learn how browser-based URL parsing stops credentials from leaving your browser, avoiding data breach risks in logs and third-party services.
[Privacy-Focused Image Metadata Removal with CapyToolkit's Local EXIF Scrubber](https://capytoolkit.com/blog/security-privacy/privacy-focused-image-metadata-removal-exif-scrubber/): Remove GPS coordinates and device data from photos before sharing. Everything runs in your browser with zero uploads.
[File Hash Verification Guide Using SHA-256 Local Client-Side Tool](https://capytoolkit.com/blog/security-privacy/file-hash-verification-guide-using-sha-256-local-client-side-tool/): Learn to verify file integrity locally without uploads. A guide to SHA-256 hashing with CapyToolkit for secure checksum validation.