Skip to content
XUtilHub

Free Security Tools – Password Strength, 2FA Codes, File Hash, Encryption

Practical tools to stay secure: test how strong a password really is and whether it has leaked, generate memorable passphrases and secure keys, test 2FA codes, verify downloads with checksums, encrypt messages with a password, and mask personal data before sharing text. Everything runs in your browser.

7 tools

Password Strength CheckerNEW

Check how strong your password is, how long it would take to crack, and whether it appeared in a data breach, without your password leaving your device.

Passphrase GeneratorNEW

Generate strong, easy-to-remember passphrases from random words using the EFF diceware word list, with entropy shown.

2FA Code Generator (TOTP)NEW

Generate time-based one-time passwords (TOTP) from a Base32 secret, create new 2FA secrets and otpauth QR codes for authenticator apps.

File Hash CheckerNEW

Calculate MD5, SHA-1, SHA-256 and SHA-512 checksums of any file and compare with the expected hash to verify downloads. Files stay on your device.

Text EncryptionNEW

Encrypt messages and notes with a password using AES-256-GCM, and decrypt them again. Works in your browser; nothing is uploaded.

Data Redaction ToolNEW

Mask emails, phone numbers, card numbers, CNIC, Aadhaar, IBANs and IP addresses in text before sharing logs, screenshots or documents.

Secret Key GeneratorNEW

Generate cryptographically secure random keys for APIs, JWT secrets, session secrets and encryption, in hex, Base64 or Base64URL.

Simple tools for better security

Most hacked accounts come down to a few avoidable mistakes: weak or reused passwords, no two-factor authentication, and personal data shared carelessly. These tools help you fix each one, and they all run in your browser, so your secrets stay on your device.

Which tool do I need?

I want to…Use
Check whether a password is strong or leakedPassword Strength Checker
Create a strong password I can rememberPassphrase Generator
Test two-factor authentication codes2FA Code Generator (TOTP)
Make sure a download isn't damaged or tampered withFile Hash Checker
Protect a message with a passwordText Encryption
Hide personal data before sharing textData Redaction Tool
Create API keys and app secretsSecret Key Generator

Built on standard cryptography

Hashing, encryption and random numbers use your browser's built-in Web Crypto API: SHA-2, HMAC, AES-GCM, PBKDF2 and a cryptographically secure random generator. Nothing you type is sent to our servers.

More security tools

Password generator, hash generator, bcrypt generator, JWT decoder and remove EXIF data from photos.

Frequently asked questions

Are my passwords and files sent to your servers?

No. All checks, hashing and encryption run in your browser using its built-in Web Crypto features. The only network request is the optional breach check, which sends just the first 5 characters of your password's SHA-1 hash, never the password.

Can I trust browser-based security tools?

These tools use the same standard algorithms (AES-GCM, PBKDF2, SHA-2, HMAC) built into your browser. Still, never type the passwords or 2FA secrets of important accounts into any website you don't control.

Do the tools work offline?

Yes. Once a page has loaded, everything except the breach check works without a connection.