Password Security, Start Here

Free online toolkit to check password strength, generate secure passwords, and check for breaches.
All processing is done locally in your browser — your data never leaves your device.

Check Your Password Read Security Guide

Password Strength Checker

Real-time password analysis: checks length, character diversity, common patterns, and provides improvement suggestions.

Local Only

Random Password Generator

Configurable strong password generator with character type selection, ambiguous character exclusion, and passphrase mode.

Configurable

Hash Toolkit

Generate and verify hashes using MD5, SHA-1, SHA-256, SHA-512, and bcrypt.

Local Only

Breach Checker

Check if your password appears in known data breaches using the HIBP k-anonymity model.

Online Query

Secure Note

Encrypted one-time notes with burn-after-reading. Share sensitive information securely — data is encrypted in your browser before it ever reaches the server.

Encrypted

URL Safety Checker

Check if a link is safe — detect phishing, malware, and malicious URLs using Google Safe Browsing.

URL Check

SSL/TLS Checker

Check a website's SSL certificate configuration and HTTP security headers. Get a security rating with detailed analysis.

SSL Check

TOTP 2FA Generator

Generate time-based one-time passwords for two-factor authentication directly in your browser. Supports multiple keys and auto-refresh.

Local Only

Base64 Encoder / Decoder

Encode and decode Base64, URL encoding, and hex. All processing done locally in your browser.

Codec Tools

Password Policy Generator

Generate password policy recommendations based on your security requirements.

Policy Tool

Security Headers Generator

Generate CSP, HSTS, and other HTTP security header configurations.

Dev Tool

Password API

RESTful password generation API for developers. Free to use.

Free API

Security Knowledge Base

Password security best practices, 2FA introduction, password manager recommendations, and breach response guides.

Knowledge Base

Why CKPSW?

🔒

Privacy First

All password calculations are performed locally in your browser — no data is sent over the network.

🛡️

Safe Queries

Uses k-anonymity model for breach lookup — your full password is never transmitted.

📱

Mobile Friendly

Responsive design works great on both phone and desktop.

🌙

Dark Mode

Supports light/dark theme switching to protect your eyes.

Privacy Promise

All password-related features on CKPSW run entirely in your browser. The breach checker uses the k-anonymity model — only the first 5 characters of your password's SHA-1 hash (roughly 1 trillionth of the full hash) are sent to the API. The HIBP server cannot reconstruct your password.

We do not collect any personal information or use analytics tracking scripts.