Free password & security tools in your browser.

A collection of privacy-friendly tools for generating and checking passwords, keys, IDs, hashes, JWTs, and more. No accounts, no tracking, and everything runs locally.

All tools rely on secure browser APIs like window.crypto. We don't send your passwords, tokens, or data to any server.

Tools

All your credential tools, in one place.

Create strong credentials, debug tokens, generate IDs, and verify integrity without installing anything.

Developer tools

New

JSON to TOON Converter

Convert JSON to compact TOON format for LLM prompts and decode TOON back to JSON. Lossless bidirectional conversion saves ~40% tokens.

Open toolRuns entirely in your browser

Passwords

New

Password Generator

Generate strong, random passwords with customizable length, symbols, and character sets. Built for password managers.

Open toolRuns entirely in your browser

Passwords

Password Strength Checker

Check how strong a password is, spot weak patterns, and get suggestions to improve it without uploading anything.

Open toolRuns entirely in your browser

Passwords

Passphrase Generator

Create long, memorable passphrases using multiple random words instead of hard-to-remember character soup.

Open toolRuns entirely in your browser

Utilities

Username Generator

Generate clean, professional, gamer, or anonymous-style usernames based on optional keywords.

Open toolRuns entirely in your browser

Developer tools

API Key Generator

Generate cryptographically secure API tokens as hex or Base64 strings for configs, webhooks, and internal services.

Open toolRuns entirely in your browser

Identifiers

UUID & ULID Generator

Instantly generate UUIDs and ULIDs for database IDs, events, logs, and distributed systems.

Open toolRuns entirely in your browser

Developer tools

JWT Decoder & Generator

Decode JWT headers and payloads, inspect claims, and generate HS256/HS512-signed tokens entirely in your browser.

Open toolRuns entirely in your browser

Developer tools

Hash Generator (SHA-256 / SHA-512)

Hash text or files with SHA-256 and SHA-512 using the Web Crypto API. Copy hex and Base64 digests in one click.

Open toolRuns entirely in your browser

Developer tools

Random String Generator

Generate flexible random strings for tests, fixtures, temporary codes, and more with custom character sets.

Open toolRuns entirely in your browser

About credential.help

Simple, privacy-friendly tools for passwords, tokens, and identity.

Designed for people who care about security but don't want to give their credentials to yet another random website.

Built around strong passwords

Start with the strong password generator and password strength checker. Generate long, unique passwords and immediately check for weak patterns, reuse risks, and entropy—without storing or uploading your secrets.

Developer-focused utilities

For developers, there are tools for API keys, UUIDs & ULIDs, JWT decoding & generation, SHA-256 / SHA-512 hashing, and random strings. Perfect for local development, testing, and debugging auth flows.

No logins, no tracking, no sync

credential.help doesn't require an account or sync data. Tools rely on browser APIs like crypto.getRandomValues and crypto.subtle so that passwords, tokens, and hashes are generated and processed locally on your device.

When should I use these tools?

Use credential.help when you're setting up new accounts, cleaning up old weak passwords, or working on authentication and API integrations. It's ideal for quickly generating secure credentials, testing JWTs and hashes, or creating IDs and usernames for prototypes and side projects.

Do I still need a password manager?

Yes. These tools help you create and inspect credentials. A password manager securely stores them and autofills them across devices. The best setup is: use credential.help to generate strong passwords and passphrases, then save them in your manager as the single source of truth.