Skip to content
JustTools

Free Online Security Tools

Create and test strong secrets, hash and verify passwords with bcrypt, convert SSH private keys between PuTTY and OpenSSH formats, hide messages where no one will look, and check that websites are secured properly. Passwords are generated and checked on your device with your browser’s built-in cryptography; the SSL checker looks up public certificate records.

7 tools · free · no sign-up

New

Password Generator

Generate strong, random passwords, memorable passphrases and PINs with a cryptographically secure generator. Free, instant and private — nothing is stored.

Open
New

SSL Checker

Check any website’s SSL certificate: expiry date and days left, issuer, covered domains, revocation and CAA, plus a live HTTPS test from your browser.

Open
New

Image Steganography Tool

Hide a secret message or file inside an image, protected with a password, and reveal hidden messages from PNG images. Free and private — no upload.

Open
New

Password Strength Checker

Check how strong a password is: time to crack, common words and patterns it hides, tips to improve it, and a safe data-breach check. Fully private.

Open
New

PPK to PEM Converter

Convert a PuTTY .ppk private key to PEM or OpenSSH format online, with or without a passphrase. Supports PPK v2 and v3, RSA, ECDSA and Ed25519. No upload.

Open
New

PEM to PPK Converter

Convert a PEM or OpenSSH private key (id_rsa, AWS .pem) to a PuTTY .ppk file online — PPK v3 or v2, with an optional passphrase. Free, private, no upload.

Open
New

Bcrypt Generator & Checker

Generate bcrypt hashes with cost 4–16 and $2a/$2b/$2y prefixes, or check a password against a bcrypt hash. Explains each part. Runs in your browser only.

Open

FAQ

Security Tools: common questions

Are generated passwords stored anywhere?

No. Passwords are generated with your browser’s cryptographically secure random number generator and exist only on your screen.

What does the SSL checker send?

Only the domain name you enter, to public certificate-log and DNS services, plus an HTTPS request from your browser to the site. Nothing is stored.

Which randomness source is used?

The Web Crypto API (crypto.getRandomValues), the same source browsers use for encryption keys.

Explore

More categories