Security & Privacy Tools

Hash files, encode credentials, and scrub metadata entirely client-side. Protect sensitive information with fast, reliable, privacy-first tools.

ZERO UPLOAD · ALL LOCAL
Security & Privacy Tools Hash files, encode credentials, and scrub metadata entirely client-side. Protect sensitive information with fast, reliable, privacy-first tools.
Live Tools Last Update
Password Entropy Analyser Shannon entropy, zxcvbn pattern analysis, and GPU crack-time estimates — 100% offline, nothing uploaded.
2026-06-09
URL Encoder / Decoder Percent-encode and decode URLs and query strings with component parsing.
2026-06-06
Cloud Config Sanitizer Validate Kubernetes, Terraform, and YAML manifests locally — detect secrets, security smells, and generate a sanitized safe version.
2026-05-19
X.509 Certificate Inspector Paste any PEM or DER certificate and inspect validity, SANs, key algorithm, chain depth, and expiry — client-side only.
2026-05-19
Offline OCR & Document Redactor Extract text and redact sensitive regions from documents — Tesseract WASM, 100% local, nothing uploaded.
2026-05-13
PII Scrubber Detect and tokenize PII, secrets, and internal data before sending prompts to AI — 100% local, nothing uploaded.
2026-05-08
Browser Fingerprint & Privacy Leak Inspector See exactly what your browser leaks — canvas hash, WebGL renderer, audio fingerprint, fonts, and 30+ signals. 100% local.
2026-05-04
EXIF & Image Metadata Scrubber Strip GPS, timestamps, and device data from images — 100% local, nothing uploaded.
2026-04-23
File Hash Verifier Compute SHA-256, SHA-512, SHA-1, and MD5 checksums for any file — compare against a published checksum.
2026-04-23
In Development Planned Release
Quantum-Safe Encryptor Encrypt and decrypt text with post-quantum cryptography (Kyber/Dilithium via WASM) — plaintext never leaves your browser.
2026-08
Build Integrity Verifier Verify reproducible builds by hashing two local artifacts with SHA-256 and BLAKE3, then deep-diffing functional content. Zero upload.
2026-08
Local Secret Scanner Scan code, configs, and ZIP archives for leaked API keys, tokens, and credentials — regex rule engine, zero upload, nothing sent anywhere.
2026-08
About This Category

Why must security tools be client-side?

Hashing a password or verifying a file checksum on a remote server defeats the purpose of the operation. The moment you send a password to a third-party hash tool, you have exposed it, regardless of how the site claims to handle it. The only trustworthy way to hash sensitive data is to do it locally, in a context you control.

The tools in this category use the Web Crypto API (SubtleCrypto), the browser's native cryptographic primitive layer and the same interface used by password managers and secure communication tools. SHA-256 hashes, entropy calculations, and URL encoding all run entirely within your browser tab. Nothing is transmitted, nothing is logged.

For file verification specifically: the File Hash Verifier reads your file using the browser's FileReader API and computes the SHA-256 digest client-side. The file bytes never leave your machine. You can compare the result against a publisher's checksum to confirm a download has not been tampered with.

FAQ