Crypto Tools
Client-side crypto tools, each on its own page, each running entirely in your browser.
Password Generator
Cryptographically secure random passwords from crypto.getRandomValues, with length, character sets, and a live strength read-out.
Open tool →Password Strength Checker
Check how secure your password is, calculate brute-force crack times, and safely test for data breach leaks.
Open tool →UUID v4 Generator
Generate one UUID v4 or a batch of five, using the browser’s native crypto.randomUUID.
Open tool →SHA-256 Hash Generator
Hash any text to a 64-character SHA-256 digest with the WebCrypto API, updating as you type.
Open tool →SHA-512 Hash Generator
The 128-character SHA-2 variant, for when a longer digest is required. Also computed via WebCrypto.
Open tool →.env Secret Generator
Generate cryptographically secure secrets for JWT, Django, Rails, NextAuth, cookies, and database configs locally in your browser.
Open tool →Diceware Passphrase Generator
Generate memorable, high-entropy passphrases using the official EFF wordlist or pronounceable syllables with real-time entropy calculation.
Open tool →Bulk UUID, NanoID & MAC Generator
Generate up to 5,000 UUIDv4, time-ordered UUIDv7, NanoID, and unicast MAC addresses instantly in memory with custom formatting.
Open tool →Generating versus hashing
These tools split cleanly in two. The password and UUID generators createrandomness, drawing from the operating system's entropy pool through the browser. The hash tools consume data, reducing input of any size to a fixed-length fingerprint that cannot be reversed.
What they share is WebCrypto. Every operation here is a native browser primitive rather than JavaScript arithmetic — which is the only reason a client-side password generator is worth trusting. A generator built on Math.random would look identical and be worthless.
Frequently asked questions
Do any of these tools send data to a server?
No. All four run entirely in your browser using the native WebCrypto API. Passwords, hashes, and identifiers are generated locally and never transmitted, logged, or stored. The pages keep working with the network disconnected.
What is WebCrypto?
A browser API providing cryptographic primitives — secure random numbers, hashing, signing, and encryption — implemented natively rather than in JavaScript. It is what makes a client-side password generator trustworthy, because the randomness comes from the operating system rather than a script.
Should I hash a password with SHA-256?
No. SHA-2 hashes are built to be fast, which is exactly wrong for password storage — speed helps the attacker. Use a slow, salted, purpose-built algorithm such as bcrypt, scrypt, or Argon2. The hash tools here are for fingerprinting data, not storing credentials.
Which hash length should I pick?
SHA-256 for almost everything: it is universally supported, has no known practical attack, and produces a manageable 64-character digest. Reach for SHA-512 when a specification requires it or you want extra margin.