🔒

Security Tools

These utilities cover the routine security checks that come up in development and system administration: confirming that a file arrived intact, producing an identifier that will not collide, and judging whether a password is worth using. The SHA256 Hash Generator is the one to reach for when the hash matters. It produces the digest used to verify downloads, sign data and store credentials, and it is what current guidance expects. The MD5 Hash Generator remains here because plenty of older systems, checksum files and legacy APIs still quote MD5 values that you need to reproduce and compare. Use it for matching against existing checksums, not for anything protecting real secrets. The UUID Generator produces universally unique identifiers for database rows, test fixtures, filenames and message keys, which saves inventing a scheme of your own and avoids clashes when records are merged from several sources. The Password Strength Checker estimates how resistant a candidate password is, flagging length, predictable substitutions and common patterns, and is best used while you are still choosing rather than after an account exists. Run it on a draft password rather than one already in service. The calculations happen in your browser, so nothing you type is transmitted or stored.

4 tools available

Showing 1–4 of 4

🔒

MD5 Hash Generator

Turn any text into its 32-character MD5 hash in the browser, with optional auto-hashing as you type.

Security Tools 494 uses
🔒

SHA256 Hash Generator

Produce the 64 character SHA-256 hexadecimal digest of any text, computed in your browser with the Web Crypto API.

Security Tools 29 uses
🆔

UUID Generator

Generate up to 100 version 4, 1 or 7 UUIDs in lowercase or uppercase and copy them in one click.

Security Tools 406 uses
🛡️

Password Strength Checker

Check a password against six rules and see a live strength rating with targeted suggestions.

Security Tools 179 uses

Other Categories

🔢 Basic Everyday Calculators 🔧 media file converter 📐 Scientific & Math Calculators 💰 Finance Calculators 💪 Health & Fitness Calculators 📅 Date & Time Calculators 🏗️ Construction & Engineering 📊 Business Calculators

The six rules and how they add up to a rating

Each keystroke re-runs six independent tests. The first counts characters and passes at eight or more. The next four look for the presence of at least one character from each of four sets: lowercase letters, uppercase letters, digits from 0 to 9, and special characters such as punctuation and symbols. The sixth compares your password against a curated list of passwords known to be heavily used, and fails if it matches.

The number of rules passed then maps to a score from 0 to 5. Passing all six with a length of at least twelve characters scores 5. Passing all six at a shorter length scores 4. Five of six scores 3, four of six scores 2, and two or three of six scores 1, with zero or one rule passed scoring 0.

Those scores become labels: 0 or 1 reads as Weak, 2 as Medium, 3 as Strong, and 4 or 5 as Very Strong. The meter fills in proportion to the score, so the bar is a picture of the same number. Alongside it, a suggestion is generated for each failing rule, telling you exactly which character type or length requirement to address.

Worked example: adding one character changes two grades

Start with the password Sunshine2024. It is twelve characters long, so the length rule passes. It contains lowercase letters, an uppercase S and the digits 2024, so three more rules pass. It is not on the common-password list, so that passes too. The only failing rule is the special character requirement.

Five of six rules passed gives a score of 3, which displays as Strong with the meter at 60 per cent, and the suggestion points specifically at the missing symbol.

Now change it to Sunshine2024! by adding a single exclamation mark. The password is now thirteen characters, all six rules pass, and the length is at least twelve, so the score jumps to 5. The label becomes Very Strong and the meter fills completely.

For contrast, try abc123. It is six characters, so length fails, there is no uppercase letter and no symbol, and it appears on the common-password list. Only two rules pass, lowercase and digit, which gives a score of 1 and a Weak rating with three separate fixes suggested.

What a rule-based score does not measure

These six checks describe the composition of a password, not how long it would survive a real attack. That distinction matters. A string like P@ssw0rd1 passes every rule here, yet it follows one of the most predictable substitution patterns and appears in the wordlists attackers try first. A checker that counts character types cannot see that.

Length is the factor that does the heavy lifting, because each additional character multiplies the search space. A passphrase of four or five unrelated words is typically far harder to crack than an eight-character string of mixed symbols, and it is much easier to remember. Use the rules here as a floor to clear rather than a target to optimise.

Three caveats are worth stating plainly. The common-password list is curated and finite, so a password it does not recognise is not thereby proven unique. The tool does not check whether a password has appeared in a known data breach, which is a separate and important test. And as a habit, avoid typing a password you currently use into any web page, including this one; test a variation instead, or let a password manager generate something random you never need to type.

Frequently Asked Questions

Six rules: at least eight characters, at least one lowercase letter, one uppercase letter, one digit and one special character, and that the password is not on a curated list of commonly used passwords. Each rule shows as a pass or fail so you can see what is missing rather than just a score.
Pass all six rules. If the password is also twelve characters or longer it scores the maximum of 5 and fills the meter completely. Passing all six at a shorter length scores 4, which still reads as Very Strong, while five of six rules gives Strong and four gives Medium.
Not necessarily. The rules measure composition, not resistance to guessing. A predictable pattern such as a dictionary word with letters swapped for lookalike digits and a symbol on the end passes all six checks while sitting near the top of attacker wordlists. Length and unpredictability matter more than ticking character-type boxes.
No. It compares against a curated list of very common passwords, which catches obvious choices, but it does not query any breach database. Checking exposure in known breaches is a separate step, and most password managers and browsers now offer it as a built-in feature worth turning on.
As a rule, no. It is safer to test a similar password built on the same pattern, then apply what you learn to the real one. Better still, let a password manager generate a long random password you never type, and reserve memorised passphrases for the handful of accounts that genuinely need them.