.env Toolkit

Beautifies XML and flags syntax errors immediately, processing the text locally.

Produces strong passwords or word-based passphrases, several at once, using the browser's secure random source.

Looks through snippets, log output or environment files for leaked credentials and masks what it finds, all in the page.

Paste response headers to check Content-Security-Policy, Strict-Transport-Security, CORS and cookie attributes; no live request is made.

Converts Base64 text into hexadecimal bytes, locally.

Generates secure hex, Base64 and passphrase secrets and estimates their entropy.