Security & Privacy Tools: 7 Free Online Tools
These tools help you protect data and understand your own exposure: generating strong passwords, encrypting files, producing two-factor codes, hiding messages in images, moving files directly between devices and checking what your browser reveals.
Cryptographic operations use the browser’s Web Crypto API on your device. Keep your passwords and backups safe, because there is no recovery option.
Who it is for: Privacy-conscious users, developers and students learning applied security.
Tools in this category
2FA TOTP Authenticator
Generate time-based one-time passwords (TOTP) from a secret key or QR, with an AES-256 encrypted local vault. Keep a backup: there is no cloud sync.
Good for: developers, power users.
File Encryptor (AES-256)
Encrypt and decrypt files with AES-256 using the Web Crypto API, with an optional decoy vault. If you forget the password, the file cannot be recovered.
Good for: privacy-conscious users.
My IP Address, WebRTC Leak & Browser Check
See your public IP address, check for WebRTC leaks and review browser fingerprint details. Requires an internet connection and third-party lookups.
Good for: VPN users, privacy-curious users.
JavaScript Obfuscator
Obfuscate JavaScript with control-flow flattening, string encryption and anti-debugging options. Obfuscation makes code harder to read but is not encryption.
Good for: front-end developers.
P2P File Transfer with WebRTC
Send files directly between two devices over WebRTC with AES-256 encryption. Devices pair by exchanging connection codes, so no file passes through a server.
Good for: users moving files between devices.
Strong Password Generator
Create random passwords with adjustable length and character sets using the browser’s cryptographic random generator. Nothing is sent or stored.
Good for: everyday users.
Image Steganography: Hide a Message in a Picture
Hide a message inside an image with LSB steganography and optional AES-256 encryption, and extract it later. Use lossless PNG; JPEG recompression can destroy it.
Good for: students, privacy enthusiasts.
Privacy, processing and limits
- If you forget the password to an encrypted file or vault, it cannot be recovered. The 2FA Authenticator stores data locally with no cloud sync, so back up your keys.
- The IP Address Lookup needs third-party lookup services by nature. P2P File Transfer pairs devices with manually exchanged connection codes and uses public STUN servers for network discovery; files travel directly between devices.
- Obfuscation makes JavaScript harder to read but is not encryption and does not make code secure.
See the privacy policy for how the site itself handles data.