Evaluates password strength using zxcvbn entropy analysis: score, crack time estimate, length, character diversity, dictionary words, and pattern repetition. Everything runs locally in your browser — nothing is uploaded.
Anonymize IP addresses in log files by masking octets while preserving network structure for analysis.
Scans and clears browser cookies, localStorage, sessionStorage, and cached data for the current site. No signup or account required.
Strips GPS coordinates, camera metadata, timestamps, and software fingerprints from JPEG and PNG images. Everything runs locally in your browser — nothing is uploaded.
Calculate password entropy in bits to measure password strength against brute-force attacks. Everything runs locally in your browser — nothing is uploaded.
Estimate the time required to brute-force a password given its length, character set, and hash rate. Everything runs locally in your browser — nothing is uploaded.
zxcvbn scores 0–4 from real-world cracking models (not just length): 0–1 fall in seconds (dictionary words, patterns), 2 takes hours, 3 takes years, 4 takes centuries. Aim for 3+ on important accounts, 4 on email and banking.
Leetspeak substitutions are in every cracking dictionary — that 11-character example falls in ~3 days. Four random common words (≈44 bits) take centuries despite looking simple. Length beats complexity theater.
Add length first (each character multiplies guessing work), then uniqueness (never reuse), then unpredictability (avoid names, dates, keyboard walks like 'qwerty123'). Regenerate with the Password Generator if editing feels hopeless.
No — zxcvbn estimates guessability from patterns, it doesn't know if your exact password leaked. Check Have I Been Pwned separately; if breached, change it everywhere it was reused, immediately.
No. Analysis runs entirely in your browser via zxcvbn. Passwords never leave your device — which is the only safe way to check them.
PGP Key Generator
Generates RSA (2048/4096) or ECDSA (Curve25519) PGP key pairs with customizable user IDs, expiration dates, and passphrase protection. Everything runs locally in your browser — nothing is uploaded.
Secure Note Sharer
Encrypts a text note with a passphrase and generates a shareable link with the encrypted note in the URL fragment — the fragment is never sent to any server. Everything runs locally in your browser.