Privacy & Security tools — Free Online Privacy Tools
Strong passwords, AES-256 note encryption, hash helpers, TOTP QR codes, EXIF metadata viewing and removal, PII masking and test-data generation — all running 100% in your browser using the Web Crypto API.
Tools that keep your secrets actually secret. Generate strong passwords, encrypt notes with AES-256-GCM, hash text and files, scan and scrub EXIF metadata from photos, mask PII in free text and produce realistic test data — every operation runs locally in your browser using the Web Crypto API. Nothing is ever uploaded.
Compare Privacy & Security tools — Free Online Privacy Tools
Frequently asked questions
- Are these privacy tools really 100% browser-side?
- Yes — every tool in this category runs entirely on your device using the Web Crypto API (crypto.subtle) and a few small dynamically-imported helpers. There is no upload, no server round-trip and no analytics on the inputs. You can verify this by opening DevTools → Network and watching that no request fires while you use the tool.
- What encryption algorithm do you use for the secure note tool?
- AES-256 in GCM mode, with a key derived from your password via PBKDF2-HMAC-SHA-256 at 250,000 iterations. A fresh 16-byte salt and 12-byte IV are generated for every encryption, and the GCM authentication tag protects the ciphertext against tampering. This matches the parameters NIST recommends for password-based encryption in 2026.
- Do you store my passwords, notes or hashes?
- No. There is nothing to store because nothing leaves your browser. Closing the tab discards every value in memory; we have no database, no logs and no telemetry on any input field on these tools.
- Can I use these tools for GDPR or HIPAA-related work?
- Yes — because the data never leaves your device, you don't expand your processor inventory by using these tools. They're a good fit for one-off masking, hashing and password generation tasks during incident response or security audits. For ongoing pipelines, use a self-hosted equivalent of course.
- How do you remove EXIF metadata from a photo?
- We draw the image onto a fresh HTML canvas and re-export it as JPG or PNG. Canvas exports never include EXIF, so the resulting file has no GPS, no camera info and no timestamp — your visual content is preserved but every metadata field is gone.