Free Online Security Tools Beta
A handful of small, slightly nerdy infosec tools. Everything here runs for fun and curiosity — nothing is stored.
Includes an IP lookup, redirect tracer, local port scanner, clickjacking tester, user-agent inspector, JWT decoder, hash generator, Base64 encoder/decoder, and password generator — all free and running entirely in your browser.
Frequently Asked Questions
Are these security tools free to use?
Yes. Every tool on this page is free, requires no sign-up, and runs directly in your browser.
Is any data collected or stored when I use these tools?
No. Tools like the JWT decoder, hash generator, Base64 converter and password generator run entirely client-side and never send your input anywhere. The IP lookup, redirect tracer and clickjacking tester call public third-party lookup APIs only to fetch the data you explicitly request.
Does the local port scanner check my whole network?
No, it only ever probes 127.0.0.1 (your own machine). It cannot reach other devices on your network or the internet, and browser security rules mean results are a timing-based heuristic rather than a guaranteed state.
Is the JWT decoder secure to use with real tokens?
Decoding happens entirely in your browser using client-side JavaScript — the token is never transmitted anywhere. Note that it only decodes the header and payload; it does not verify the signature.