ToolsRift studio · 89 tools

Security Studio — free security tools that run in your browser

97 free security tools: password and passphrase generators, hashes, bcrypt, TOTP secrets, RSA keys and classic ciphers, made on your device.

Start here

All Security tools

About Security Studio

Security Studio has 97 tools for creating secrets, checking data and exploring codes. The Strong Password Generator and Passphrase Generator use your browser's cryptographic random number source and report the real entropy of what they make. You can hash text with MD5, SHA-2, SHA-3 or BLAKE3 using SHA-256 and related tools, check a downloaded file's checksum, create bcrypt hashes, generate a TOTP secret for two-factor setup, or produce an RSA key pair with the Web Crypto API.

Because everything is generated on your device, no password or key is ever sent over the network or logged. Hash results are checked in automated tests against published test vectors from the relevant standards. The studio also has a playful side: Caesar, Vigenere, Playfair and other historical ciphers, Morse code and Braille for puzzles and teaching. Those classic ciphers can be broken easily and should never protect real data. Fake names, addresses and Luhn-valid test card numbers are for filling forms in development and testing only.

Frequently asked questions

How random are the generated passwords?
They use crypto.getRandomValues with rejection sampling, so every allowed character is equally likely. The entropy shown is calculated from the exact number of possible passwords.
Is MD5 still safe to use?
Not for passwords or signatures, because collisions can be created. It is fine as a quick checksum to spot accidental changes. For passwords use bcrypt or a similar slow hash.
Can I verify a downloaded file with these tools?
Yes. File Hash Calculator computes MD5, SHA-1 and SHA-256 of a file on your device so you can compare it with the checksum the publisher lists.
Are the test credit card numbers real cards?
No. They only pass the Luhn checksum, so payment sandboxes accept their format. They cannot be used to pay for anything.
Is a password strength score a guarantee?
No. It estimates how hard a password is to guess from its pattern and a list of common passwords. A unique password for each site and two-factor login matter more.

Other studios

Start typing to search every tool.

↑ ↓ to moveEnter to openEsc to close