Password generator & entropy meter
Generate random passwords and check bit entropy against NIST SP 800-63B guidelines.
01 / TOOLKIT
Browser-side utilities for everyday development, data handling, security inspection, and quick experiments. No accounts, no servers, and no tracking.
Inputs stay on your machine. Nothing is sent to a remote server.
Built with the same monochrome design as the rest of the site.
No matching tools found.
02 / INDEX
03 / GENERATORS
Small deterministic tools for credentials, identifiers and visual primitives.
Generate random passwords and check bit entropy against NIST SP 800-63B guidelines.
Generate RFC 4122-style UUID v4 identifiers using crypto.randomUUID().
Create a compact grayscale or hue-based palette from one source color.
Hash text with Web Crypto. MD5 is intentionally omitted from the browser-native path.
04 / CALCULATOR
Fast calculations with arithmetic, trigonometry, logarithms, and powers evaluated locally.
Trigonometric functions (sin, cos, tan), square root (sqrt), base-10/natural logs (log, ln), powers (x^y), and mathematical constant π.
05 / ENCODING
Useful for APIs, URLs, payloads, structured data and quick debugging.
Convert text, SVG, or small files into Data URIs ready to embed in HTML or CSS. Inspect MIME types and copy code directly.
04 / SECURITY & FORENSICS
Inspection-first helpers for authorized research, debugging and forensic workflows.
Paste logs, emails, or notes to extract and deduplicate IP addresses, domains, URLs, hashes, and CVEs right in your browser.
Test input strings or query parameters against common injection patterns like SQLi, XSS, path traversal, and command injection.
Defang indicators of compromise (URLs, domains, IPv4, IPv6, email addresses) for safe sharing, or reverse defanged artifacts back to raw form.
Paste HTTP response headers from curl or browser DevTools to see which security headers are configured and what's missing.
| Security Header | Status | Details & Advice |
|---|
Convert and inspect byte representations with authentic 16-column forensic hex dump, offsets, and ASCII translation.
00000000 Enter text or hex above and click Inspect
Analyze hash length, format, and character encoding to identify potential cryptographic algorithms.
Decode JWT header and payload locally. This does not verify the signature.
—
—
Decoding is not verification.
Fetch response headers from a URL when the target permits browser CORS access.
No request yet.
CORS restrictions are enforced by the browser.
Enter a pattern and text.
Inspect IPv4 addresses and common CIDR ranges without sending the input anywhere.
—
05 / NETWORK & WEB
Local-first HTTP request synthesis, RFC 3986 URL deconstruction, DNS email security validation, and protocol triage.
Build an API request or paste a curl command to generate equivalent JavaScript fetch() and Python requests code.
Break down URLs into parts, strip out marketing tracking parameters (UTM, Facebook, Google), and check for suspicious redirects.
| Parameter Key | Value | Action |
|---|---|---|
| No query parameters | ||
Check or generate SPF and DMARC DNS TXT records to prevent email spoofing.
Inspect browser engines and operating systems, or identify known search crawlers and scrapers.
Quick search for standard network service ports and triage notes.
| Port | Service | Note |
|---|
Quick lookup for standard HTTP status codes.
—
Calculate accessibility contrast ratio.
08 / CONVERT
Length, data, temperature, and Unix epoch conversions with timezone and relative time breakdown.
Auto-detects Unix seconds or milliseconds and shows UTC, local time, and relative delta.
09 / COMPARE
A compact line-based diff for code, notes, JSON and configuration files with exportable patch support.
—
10 / FILES
Select a file and calculate a SHA-256, SHA-384 or SHA-512 digest in the browser.
The file bytes are read in this tab; no upload is performed by this page.
11 / TEXT
Quick analysis for documentation, notes, logs and content cleanup.
12 / DEVELOPER
Small helpers that save the repetitive five-minute jobs.
—
—
—
13 / EDITOR
Keep the editor as an optional workspace instead of making it the homepage.
Ready.
JavaScript runs locally in the browser. Python and other languages are editor-only in this lightweight version.