Are generated passwords sent to a server?
Password generation runs in the browser, so the generated value does not need to be submitted to a remote password service.
Security & Privacy
Browse by category
15 categoriesSecurity & Privacy
16 matching tools
Showing 16/173 tools · Security & Privacy
Password Generator
Generate passwords by length, character type, and readability preferences for accounts, temporary secrets, and shared credentials.
Security & Privacy
JWT Decoder
Split JWT Header, Payload, and Signature locally, explain common claims and expiry, and verify HMAC, RSA, and ECDSA signatures.
Security & Privacy
Email Header & Authentication Analyzer
Parse raw email headers locally, reconstruct delivery timing, review authentication alignment and suspicious clues, and create a sanitized copy for support sharing.
Security & Privacy
X.509 Certificate, CSR & Key Inspector
Inspect PEM or DER certificates, CSRs, public keys, and private-key structure locally. Review extensions, expiry, host names, CSR signatures, chains, and key matches.
Security & Privacy
SSH Key, Certificate & known_hosts Inspector
Inspect authorized_keys, known_hosts, RFC 4716, OpenSSH/PEM keys and OpenSSH certificates locally with fingerprints, validity and comparison.
Security & Privacy
Email Domain Security & Deliverability Checker
Query live SPF, DMARC, selected DKIM keys, MX, TLS-RPT, TLSA, CAA, BIMI and MTA-STS with bounded recursion.
Security & Privacy
Security Headers & CSP Auditor
Audit public URL or pasted HTTP response headers for CSP, HSTS, cookies, CORS, privacy, isolation, and deprecated controls, with a transparent heuristic score.
Security & Privacy
Dependency Vulnerability & SBOM Scanner
Parse JavaScript, Python, Rust and Go lockfiles locally, query exact versions against OSV, inspect affected ranges and export a CycloneDX 1.7 software bill of materials.
Security & Privacy
Source Secret Scanner
Scan pasted text, files, folders and ZIP archives locally for high-confidence secret patterns, inspect masked evidence and export redacted reports or cleaned source copies.
Security & Privacy
GitHub Actions Security Auditor
Parse GitHub Actions YAML locally and flag broad permissions, mutable actions, expression injection, risky pull-request targets, self-hosted runner exposure and weak OIDC controls.
Security & Privacy
OAuth & OIDC Debugger
Fetch bounded public OpenID Connect discovery metadata and JWKS, review provider configuration, verify a pasted JWT locally, validate important claims and generate PKCE, state and nonce values.
Security & Privacy
Dockerfile & Compose Auditor
Audit Dockerfiles and Docker Compose YAML locally for mutable images, embedded secrets, root users, privileged services, dangerous mounts, host networking and reliability gaps.
Security & Privacy
Kubernetes Manifest Security Auditor
Parse rendered Kubernetes YAML locally and flag Pod Security Standards, RBAC, image, secret, resource, probe, network and ingress risks with a relationship inventory.
Security & Privacy
.env Configuration Auditor
Compare key sets across local .env files, find missing, duplicate, empty, placeholder, naming and substitution risks, and generate an .env.example with no real values.
Security & Privacy
Webhook Signature Validator & Debugger
Debug webhook signatures with the exact raw body and browser Web Crypto, including replay windows, header formats, encodings and common body mutation problems.
Security & Privacy
Kubernetes RBAC Permission Simulator
Analyze Roles, ClusterRoles, RoleBindings and ClusterRoleBindings locally, simulate a concrete subject request, flag privilege risks, and draft a minimal role.
Security & Privacy
Focused tools for passwords and JSON Web Tokens
Create passwords with explicit length and character rules, or inspect a JWT before trusting its claims. The tools expose relevant settings and token details instead of hiding them behind a single action.
Frequently asked questions
Does decoding a JWT verify that it is trustworthy?
No. Decoding only reveals the token contents. Use the available signature verification controls and validate issuer, audience, expiry, and key material for a real security decision.