Privacy & Security Tools
Free privacy and security tools — generate strong passwords, random data, and secure credentials. Runs locally in your browser.
The Simple Toolbox password tool generates credentials in this browser with the Web Crypto API (crypto.getRandomValues()). Bcrypt hashing and verification run locally with bcryptjs. After the page loads, generation and hashing do not need a network request. We describe this tool only — we do not claim how other password generators work.
What these tools cover
- → Password Security — Generate strong passwords and check their entropy.
- → Bcrypt Hash Gen — Generate and verify strong bcrypt password hashes in your browser.
How to get accurate results
Set password length to at least 16 characters and include both symbols and numbers — length is the primary driver of entropy against brute-force attacks. For bcrypt, match the work factor to your production environment's setting before verifying a hash — mismatched work factors produce comparison failures even when the password is correct. Copy the generated output to your password manager immediately, before refreshing or closing the tab.
When to use these tools
- → Generating a strong credential for a new account in this browser, then copying it into a password manager
- → Creating a bcrypt hash during development to test your password verification logic against a known value
- → Checking what bcrypt hashing speed looks like at different work factors on your own hardware before choosing a production value
- → Replacing a weak or reused password with a cryptographically random one at the required length and complexity
Frequently Asked Questions
What privacy tools are available?
Password generator (crypto.getRandomValues()), bcrypt hash generator and verifier.
Is the password generator cryptographically secure?
It uses the browser's native crypto.getRandomValues() API — a CSPRNG suitable for passwords. That is cryptographically secure randomness, not Math.random(), and not a hardware true-random (TRNG) claim.
Can I use the bcrypt tool with real passwords?
Yes — bcrypt hashing runs entirely in your browser using bcryptjs. Tool inputs stay in your browser. The site uses aggregate Google Analytics.
Why should I use a password generator instead of making up my own password?
Human-generated passwords follow predictable patterns. A 16-character randomly generated password has roughly 105 bits of entropy — exponentially harder to crack than any memorable password a person would invent.