Security

The security category is intentionally small: a password generator, a password strength checker, and a hash generator. All three run entirely in your browser, which is the right design for tools that handle passwords and credentials — pasting an active password into a web service that transmits it to a server is precisely the risk you want to avoid in the first place.

The password generator uses the Web Crypto API (crypto.getRandomValues), the same randomness source used for cryptographic keys, rather than the much weaker Math.random some online tools rely on. The strength checker estimates entropy and crack time based on length, character classes, and common patterns — heuristic, but useful as a gut check. The hash generator computes MD5, SHA-1, SHA-256, and SHA-512 fingerprints for file integrity, content addressing, and signature work. For password storage in a real system, use a key-stretching function (bcrypt, scrypt, Argon2) rather than a plain hash; cryptographic hashes alone are not suitable for passwords on their own.