Tools
Networking and security utilities. Most run entirely in your browser; two talk to the Worker (dynamic/) — each card's badge says which is which.
Subnet calculator
CIDR, masks, broadcast, usable hosts, and binary representation.
Hashes
Generate and verify MD5, SHA-1, SHA-256, and SHA-512 for text or files.
Encoder / Decoder
Base64, URL, and hex — both directions, UTF-8 aware.
Password generator
Strong passwords generated with crypto.getRandomValues, with an entropy meter.
Email header analyzer
Paste an email’s raw header and see the Received chain, the SPF/DKIM/DMARC verdicts, and the spoofing signals.
What your photo reveals
Extracts the EXIF metadata from a JPEG image — camera, date, settings, and GPS coordinates, if present.
CSP analyzer
Paste a Content-Security-Policy and get a critical read, directive by directive: what it protects, what only pretends to, and what is missing.
Passkey lab
Create a real demo passkey (WebAuthn) and see, byte by byte, what the authenticator returns — and why none of it would work on a lookalike domain.
Has your password leaked?
Checks if a password appears in known data breaches, without it ever leaving your browser (k-anonymity via Have I Been Pwned).
Mirror
What any server learns about you the moment you connect — before cookies, before JavaScript. Nothing is stored.
🔒 client-side: nothing leaves the browser. 🛰️ needs server: talks to the Worker (dynamic/) — each one explains, on its own page, exactly what it sends.