Privacy tools

These tools evaluate and generate credentials without sending anything to a server. The password strength meter calculates entropy in bits, estimates crack time at three attack speeds, and flags matches against a common-password list — all done client-side so the password you are testing never leaves the browser. The cryptographically secure password generator uses the Web Crypto API to produce random characters from a configurable character set with no server involvement.

The Diceware passphrase generator uses the EFF long wordlist and the Web Crypto API to pick words, producing passphrases that are both high-entropy and memorable. The HTTP header security analyzer grades six security response headers — including Content-Security-Policy, Strict-Transport-Security, and X-Content-Type-Options — from A to F based on presence and configuration. The browser cookie parser decodes Set-Cookie headers and flags attributes like HttpOnly, Secure, and SameSite so you can audit cookies without a proxy tool.