19 Free Tools · 100% Browser-Based

Security Tools

Free, privacy-first tools for your digital security. Everything runs in your browser — no accounts, no tracking, nothing sent to any server.

No accounts required Nothing stored No server calls Works offline Free forever

🔐

2FA Code Generator

Our flagship tool — paste your TOTP secret key or scan an otpauth:// URL and get a live 6-digit code instantly. No app needed, no account required.

Open Generator →

Generator Tools

Account Security Score

Answer 10 questions and get your personal security score with specific gaps and recommendations. Takes 2 minutes.

Interactive quiz Gap analysis

Password Strength Checker

Real-time entropy score, crack time estimate, and specific improvement tips. Your password never leaves your browser.

Entropy scoring Crack time

Recovery Code Vault

Store your 2FA backup codes encrypted with AES-256. Client-side only — codes never leave your browser.

AES-256 encryption Zero server

Password Generator

Generate strong, cryptographically random passwords. Customise length, character types, and exclude ambiguous characters.

Most Popular Strength Checker Instant

Random Number Generator

Generate cryptographically random numbers in any range. Dice presets (D6, D20, D100), bulk generation, and lottery mode. 100% browser-based.

Dice Presets Bulk Mode Instant

Generate RFC 4122 UUID v4 identifiers instantly. Bulk generate up to 100 at a time, with format options: standard, uppercase, no-dashes, or braces.

Developer UUID v4 Bulk Generate

Security & Privacy

2FA QR Code Scanner

Upload a 2FA QR code image or use your camera to scan it. Extracts the TOTP secret key so you can use it directly — no authenticator app needed.

Camera support File upload

WebRTC Leak Test

Test if your real IP is exposed through WebRTC even when behind a VPN or proxy. Instant client-side detection, no data stored.

Security VPN Leak Test Instant

Generate MD5, SHA-1, SHA-256, and SHA-512 hashes instantly. Real-time output as you type, with one-click copy per algorithm.

Security MD5 · SHA-256 · SHA-512

IP Address Lookup

Find your public IP address instantly. Look up any IP or domain for geolocation, ISP, ASN, and timezone information.

High Traffic Geolocation ASN

Developer & Power User

Base32 Encoder / Decoder

Encode text to Base32 or decode Base32 strings back to text. Also includes a TOTP code verifier — check if any 6-digit code is valid for a secret key.

RFC 4648 TOTP Verifier

Decode any JSON Web Token: inspect header, payload claims, algorithm, issuer, and expiry. Colour-coded with automatic expiry checking.

Developer Claims Inspector Expiry Check

TOTP Secret Key Generator

Generate a cryptographically secure base32 secret key for 2FA setup. Compatible with all authenticator apps. Runs 100% in your browser.

2FA Setup RFC 6238 Base32

OTPAuth URI Builder

Build otpauth:// URIs and scannable QR codes for authenticator app setup. Enter your secret, issuer and account — QR generated instantly.

Developer QR Code 2FA Setup

Unix Timestamp Converter

Convert epoch timestamps to human-readable dates and back. Live current Unix time with TOTP window display. Essential for debugging JWTs and TOTP.

Epoch Time TOTP Debug JWT

Generate and verify HMAC signatures using SHA-256, SHA-512, SHA-384, or SHA-1. Uses the native Web Crypto API. Includes verify mode for webhook debugging.

HMAC-SHA256 Webhooks API Auth

Bcrypt Hash Generator

Hash and verify passwords with bcrypt. Choose your cost factor (8–12). Includes a verify mode to check password-hash pairs. 100% client-side.

Password Hashing Cost Factor Verify

Passphrase Generator

Generate strong, memorable passphrases from random words. Diceware-style with entropy calculator. Often more secure than random character passwords.

Diceware EFF Wordlist Entropy

Comparison Guides

Best Password Managers 2026

1Password · Bitwarden · Dashlane · NordPass

Detailed comparison of pricing, features, security architecture, and who each manager is best suited for.

Read comparison →

Best Authenticator Apps 2026

Google Auth · Authy · Microsoft · Aegis · Raivo

Cloud backup, multi-device, open source — all the differences that actually matter when choosing a 2FA app.

Read comparison →

Free Security Tools — FAQ

Are these tools really free?

Yes — every tool on 2faco is completely free to use, with no accounts, no sign-ups, and no limits. The site is supported by advertising and affiliate links, which never affect the functionality of the tools.

Is my data sent to a server?

No. Every tool runs entirely in your browser using client-side JavaScript. Data you enter — passwords, TOTP secrets, tokens, IP addresses — is processed locally on your device and is never transmitted to any server.

Which tool should I start with?

If you want to secure your accounts, start with the 2FA Code Generator to manage your TOTP secrets, then use the Password Generator to create strong unique passwords and the Password Strength Checker to audit existing ones.

Do the tools work offline?

Most tools work fully offline once the page has loaded, because all logic runs in your browser. Tools that need network data, such as IP lookup, naturally require an internet connection to fetch results.

Why should I use a browser-based tool instead of an app?

Browser-based tools work on any device without installing anything, and because nothing is stored, there is no account database to be breached. For everyday security tasks they are often the most private and convenient option.