Password & Security Tools

Online password tools for creating and auditing credentials: strong password and passphrase generators, strength and breach checkers, TOTP/OTP utilities, and secret-sharing with Shamir and PGP.

🔑

Password Generator

Password generator with strength meter, pronounceable mode, pattern syntax, bulk export. Cryptographically secure via Web Crypto API.

🎲

Passphrase Generator

Memorable passphrase generator using diceware-style word selection. 2048-word list, configurable separators, capitalization, and live entropy.

💪

Password Strength Checker

Test your password strength with Dropbox's zxcvbn engine. Real entropy estimate, crack-time scenarios and dictionary-attack warnings.

🚨

Password Breach Checker

Check if your password appears in known data breaches using Have I Been Pwned's k-anonymity API. Fast, free, no account needed.

📱

TOTP Generator

Generate TOTP secrets for two-factor authentication. Live 6-digit code, QR for Google Authenticator / Authy / Aegis, RFC 6238 compliant.

🔍

OTP Auth QR Decoder

Decode a Google Authenticator / Authy QR screenshot back into its TOTP secret. Migrate to Aegis, 1Password or any other app. Runs in your browser.

📊

Password Audit

Audit an exported password vault (Bitwarden, KeePass, Chrome, Firefox, 1Password). Flags weak, reused and breached passwords using HIBP k-anonymity.

🗃️

KeePass Viewer

Open a KeePass .kdbx database in your browser. View entries, export to JSON / CSV, no installation. KDBX4 and KDBX3 supported.

🔄

Bitwarden Converter

Convert password vault exports between Bitwarden JSON, KeePass, Chrome, Firefox, 1Password and LastPass CSV. Runs in your browser, no installation.

🧩

Shamir Secret Sharing

Split a secret into N shares where any K of them reconstruct it. Browser implementation over GF(256) for master passwords and seed phrases.

🔗

One-Time Secret Share

Share a secret via an encrypted link. AES-GCM 256-bit, decryption key lives in the URL fragment. No account, no database.

🔐

PGP Key Generator

Generate PGP / OpenPGP keys (RSA, Curve25519) in your browser. Encrypt, decrypt, sign and verify. Works with GnuPG, Thunderbird, ProtonMail.