Evaluates password strength using zxcvbn entropy analysis: 0–4 score, crack-time estimate, warnings, and fix suggestions. Sensitive data never leaves your device — encryption runs locally in your browser.
Runs on zxcvbn
Content reviewed October 2026 · About Toolzum
Scan and clear cookies, localStorage, and sessionStorage for the current site — see what's stored first. Audit privacy trackers before wiping — local inspection, free, no signup.
Strips EXIF GPS coordinates, camera metadata, timestamps, and software fingerprints from JPEG and PNG images. Sensitive data never leaves your device — stripping runs locally in your browser.
Share secrets securely via self-decrypting note links — AES ciphertext in the URL fragment, key in the link query. Send passwords without trusting inboxes — local crypto-js AES, free, no signup.
Estimate password crack times from length, charset, and attacker speed — entropy made visceral. Show why 8-char passwords fall in hours — local math, free, no signup.
Score your resume against a job description for ATS compatibility — keyword gaps, formatting flags, and fix suggestions. Applicants lift a 52/100 resume past 80 before applying — 1 credit per check, sign in free.
zxcvbn scores 0–4 from real-world cracking models (not just length): 0–1 fall in seconds (dictionary words, patterns), 2 takes hours, 3 takes years, 4 takes centuries. Aim for 3+ on important accounts, 4 on email and banking. The meter fills up to 4 segments with labels Very Weak (0) through Extremely Secure (4); crack time is quoted at 10 billion guesses/second.
Leetspeak substitutions are in every cracking dictionary — that 11-character example falls in ~3 days. Four random common words (≈44 bits) take centuries despite looking simple. Length beats complexity theater.
Add length first (each character multiplies guessing work), then uniqueness (never reuse), then unpredictability (avoid names, dates, keyboard walks like 'qwerty123'). Regenerate with the Password Generator if editing feels hopeless.
No — zxcvbn estimates guessability from patterns, it doesn't know if your exact password leaked. Check Have I Been Pwned separately; if breached, change it everywhere it was reused, immediately.
No. Analysis runs entirely in your browser via zxcvbn. Passwords never leave your device — which is the only safe way to check them.
PGP Key Generator
Generate PGP key pairs with OpenPGP.js — public for sharing, private stays local. Encrypt mail like it's 1991 but working — local crypto, unlimited saves.
Secure Note Sharer
Share secrets securely via self-decrypting note links — AES ciphertext in the URL fragment, key in the link query. Send passwords without trusting inboxes — local crypto-js AES, free, no signup.