Password Generator
Generate secure, random passwords with customizable complexity options.
Password, encryption and security tools
Security tools help you protect accounts, check data and understand what information you are sharing. Whether you are a developer testing an authentication flow or someone who just wants a stronger password, these tools give you quick answers without installing anything.
Use the Password Generator and Password Strength Analyzer to create and test passwords, the Hash Generator to create MD5, SHA-1, SHA-256 and SHA-512 checksums, and the JWT Encoder / Decoder to inspect JSON Web Tokens while debugging an API. The IP Address Lookup shows where an IP address or domain is located, and the Image Metadata Viewer reveals hidden details such as GPS location stored inside photos before you share them.
Generate secure, random passwords with customizable complexity options.
Our Password Strength Analyzer evaluates your password based on several security factors
NinjaFunction's IP Lookup Tool delivers instant intelligence on IPv4 and IPv6 addresses as well as domain hostnames. It resolves domains via client-side DNS-over-HTTPS, pinpoints geographic coordinates, queries Autonomous System Numbers (ASN), and displays the location on an embedded interactive map with zero server logging.
Extract and view all metadata from your images including EXIF data, GPS location, camera settings, and more. Perfect for photographers, journalists, and anyone who wants to know what information is hidden in their photos.
NinjaFunction's Hash Generator lets you compute MD5, SHA-1, SHA-256 and SHA-512 hashes for any text or file. Everything runs locally in your browser using the Web Crypto API — your data is never uploaded. Perfect for verifying file integrity, checksums, and developer workflows.
NinjaFunction's UUID Generator creates unique identifiers (UUIDs, also called GUIDs) in seconds. Choose version 4 for random IDs or version 7 for IDs that sort by time, create up to 1,000 at a time, and copy or download the list. You can also paste any UUID into the checker to see its version. Everything runs in your browser using secure random numbers, so nothing is sent to a server.
NinjaFunction's File Encryptor locks any file with a password using AES-256-GCM encryption, with the key made from your password by PBKDF2 (600,000 rounds). Choose a file, set a password or let the tool make a strong one, and download the locked file. To open it again, choose the locked file and type the password. The original file name is locked inside too, and any change to the file is detected. Your file and password never leave your browser.
Free online JWT decoder and encoder. Paste any JWT to instantly see the decoded header, payload, and expiry status. Create signed JWTs with HS256, HS384, or HS512. All processing happens locally in your browser — your tokens never leave your device.
2FA (Two-Factor Authentication) is a security mechanism that requires users to provide two separate forms of identification before gaining access to a system or account.
Learn what cybersecurity is in plain English. Understand common cyber threats like phishing and ransomware, types of security, and how to protect yourself online.
Learn what data privacy is in plain English. Understand what personal data is collected, who collects it, and simple steps to protect your privacy online.
Learn what a VPN is in plain English. Understand how VPNs work, what they hide, what they don't, and when you actually need one — no tech jargon.
A strong password is long (at least 12–16 characters), uses a mix of upper- and lower-case letters, numbers and symbols, and is unique for every account. Length matters most, so a long random password or passphrase is much harder to crack than a short complex one.
Only use tools that process data in your browser, and never paste a password you currently use into a site you do not trust. For extra safety, test a password with a similar pattern rather than your real one.
Yes. Photos taken on phones often contain EXIF metadata, including GPS coordinates, the date and the device model. Check a photo with the Image Metadata Viewer before posting it publicly if you want to keep your location private.