Free online security and privacy tools

Runs a set of checks on a URL, such as DNS, SSL, headers, ports and tech stack, and shows the results.

Demo of the open-source FingerprintJS library that computes a visitor ID from browser attributes.

Drag-and-drop recipe builder that chains hundreds of operations for encoding, encryption, compression and data analysis.

Zero-knowledge pastebin where text is encrypted in the browser before being stored, with expiry options.

Builds scripts that harden privacy and security settings on Windows, macOS and Linux, chosen by checkbox.

Shares passwords through links that expire after a set number of views or days.

Encrypts a secret in the browser and gives a short-lived link that can be opened once.

Creates a link to a secret message that can be opened only once.

Probes browser APIs to expose fingerprinting signals and detect spoofing or privacy tools.

Chains encoders, decoders and ciphers in a modular pipeline, with conversions running in the browser.

Encrypts files and splits the key among trusted people so a chosen number must combine shares to open them.

Creates self-destructing encrypted notes and files that can be viewed a limited number of times.

Shows how identifiable your browser fingerprint is compared with other visitors.

Moves files or text between devices as a series of QR codes, with no network link between them.

Produces recommended TLS configuration snippets for web servers, databases and mail software.

Creates diceware passphrases in the browser with a choice of word lists and entropy display.

Tests how well your browser blocks trackers and how unique its fingerprint looks.

Scans a site for third-party requests, cookies, security headers and other privacy issues.

Loads a website and reports ad trackers, third-party cookies, keystroke capture and session recording it finds.

Generates random multi-word passphrases and explains why passphrases beat short passwords.

Demo page for the totp.js library that generates TOTP codes in the browser.

Finds and masks personal data such as names and emails in text using Microsoft Presidio.

Generates look-alike domain permutations for a domain and checks which are registered, to spot phishing.

Generates secure diceware passphrases from word lists in the browser.