Security tools that Respect your Privacy
Everything runs in your browser. No tool data is ever sent to a server. Generate passwords, inspect tokens, and encode data with complete confidentiality.
Password Generator
Create secure, customizable passwords with a single click.
Passphrase Generator
Memorable multi-word phrases with strong entropy.
Password Strength Checker
Evaluate strength, entropy, and get tips to improve.
Entropy Calculator
Analyze entropy, character mix, and crack time.
Password Policy Tool
Define policies, generate compliant passwords.
Breach Checker
Check against known data breaches (HIBP & email).
Argon2 Hash
Secure Argon2id/i/d hashing (PHC winner).
Hash Generator (SHA)
Compute SHA-1/SHA-256/SHA-512 hashes locally.
NewSHA-224 Hash
Compute SHA-224 digest for any text.
SHA-256 Hash
Compute SHA-256 digest for any text.
SHA-512 Hash
Compute SHA-512 digest for any text.
NewSHA3-224 Hash
Compute SHA3-224 digest (Keccak) for any text.
NewSHA3-256 Hash
Compute SHA3-256 digest (Keccak) for any text.
NewSHA-512/256 Hash
Compute SHA-512/256 digest for any text.
NewSHA3-384 Hash
Compute SHA3-384 digest (Keccak) for any text.
NewSHA3-512 Hash
Compute SHA3-512 digest (Keccak) for any text.
MD5 Hash
Compute MD5 digest for any text.
HMAC Generator
Generate HMAC with SHA-256/SHA-512.
Bcrypt Hash
Adaptive bcrypt hashing with adjustable cost.
Scrypt Hash
Memory-hard scrypt with N/r/p controls.
PBKDF2 Derivation
PBKDF2 with SHA-256/384/512 and iterations.
Base64 Encode/Decode — Auto-Detect, Image Preview & Data URI
Encode text or files to Base64, decode Base64 back to text, and preview data:image/...;base64, images inline — with auto-detect mode and precise errors.
Hex Encode/Decode — Case, Grouping, Hex Dump & File Upload
Encode text or files to hex and decode hex back to text with a case toggle, byte grouping, 0x/space/colon parsing, an ASCII hex-dump view, and 16/32-bit endianness swaps.
URL Encode/Decode
Percent-encode URLs and query strings for safe form submission and API calls — RFC 3986 compliant.
ASCII85 / Base85
Encode binary data to ASCII85 for PDF and PostScript streams — 25% overhead, the most compact text encoding.
Base32 Encode/Decode
Encode TOTP secrets and case-insensitive identifiers with RFC 4648 Base32 — no ambiguous characters.
Base58 Encode/Decode
Encode Bitcoin addresses, IPFS CIDs, and Solana keys with Base58's typo-safe alphabet.
NewEncoding Detective
Paste an unknown string and get ranked candidates — Hex, Base64, Base32, Base58, ASCII85, URL — with evidence and a decoded preview.
JWT Encode/Decode
Encode, decode, and verify JWTs (HS256/384/512, RS256/384/512, PS256/384/512, ES256/384/512 + JWKS).
PASETO Encoder & Decoder
Encode/decode v2 & v4 — sign v4.public, encrypt v4.local, generate keys.
Opaque Token Generator
Generate secure random tokens for sessions, API keys, and bearer auth.
SAML Assertion Decoder
Decode SAML; validity window; import IdP metadata.
OIDC ID Token
Decode and verify ID Tokens (RS256 + JWK).
JWT vs PASETO Token Playground
Compare JWT HS256 and PASETO v4.local from the same payload and key.
Built for Security and Privacy
BetterPass uses the Web Crypto API for most cryptographic operations (SHA hashing, PBKDF2, token generation), with additional libraries for bcrypt, scrypt, and XChaCha20-Poly1305. Your data stays on your device during all core operations — only breach checks make a minimal SHA-1 prefix query to a public API. No logs of your tool data, no compromises.
Frequently Asked Questions
No — your passwords never reach our servers. Every tool runs entirely in your browser, and we deliberately built the site with no server-side database, no logging, and no analytics that capture tool inputs.
Since your data never travels over the network, there is no server-side breach vector that could expose your passwords. What happens in your browser stays in your browser.