Skip to content
TabBench

Security & Generator Tools

Generate strong passwords and cryptographic hashes without anything leaving your device.

2 tools · everything runs in your browser

All Security & Generators tools

  • Hash Generator

    Hash text or files and check them against a published checksum.

  • Password Generator

    Create strong random passwords with your choice of length and symbols.

About these tools

A password generated by a website that then transmits it is not a secure password, whatever the site says about its logging. Both tools here run in your browser: the Password Generator draws its randomness from crypto.getRandomValues(), and the Hash Generator computes digests locally, so the output exists only in your tab.

That distinction matters more than it sounds. Cryptographically secure randomness is what makes a generated password unpredictable, and it is not what Math.random() provides, despite how many generators rely on it.

The most common everyday use of a hash is checking a download. Software projects publish the SHA-256 of each release; hash the file you received, paste the published value into the Hash Generator's expected-hash box, and it tells you whether they match. A mismatch means the file is corrupted or is not the one the project published. Large files are read in chunks, so this works on multi-gigabyte ISOs without loading them into memory at once.

Frequently asked questions

Are generated passwords ever transmitted?

No. Generation uses the Web Crypto API in your browser, and the result exists only in your tab's memory and clipboard. Nothing is sent, logged, or stored.

Can a hash be reversed?

No. Hashing is one-way by design and discards information. Services advertising 'hash decryption' are looking the digest up in a table of common inputs, which works for weak passwords and not for arbitrary data.

Should I hash passwords with SHA-256?

No. Fast hashes are the wrong tool for password storage precisely because they are fast. Use a deliberately slow, salted algorithm such as bcrypt, scrypt, or Argon2.