Skip to content
ToolStash
Menu

Free Security & Encoding Tools

Generate passwords, hashes, QR codes and barcodes, and encode or decode text — all computed in your browser, never on a server.

1 tool ready to use, 5 more planned.

This is the category where "runs in your browser" stops being a convenience and becomes the whole point. A password generator that produces the password on someone else's server has already defeated itself. Same for a hash tool you paste an API key into, or a QR generator that quietly routes your link through its own tracking domain.

Everything here is computed locally using the browser's own cryptographic primitives. No value you type is transmitted, and QR codes encode your data directly rather than pointing at a redirect we control.

Security & Encoding you can use now

QR Code Generator

Make QR codes for links, plain text, WiFi logins or contact cards, and download them as PNG or SVG.

Planned

Scheduled, not yet built. Nothing here links anywhere — no dead ends.

Coming soon

Password Generator

Create strong random passwords with your own length and character rules, plus a strength meter.

Coming soon

Base64 Encode & Decode

Encode or decode Base64 for both plain text and files.

Coming soon

URL Encode & Decode

Percent-encode or decode URLs and individual query-string components.

Coming soon

Hash Generator

Produce MD5, SHA-1 and SHA-256 hashes from text or from a file.

Coming soon

Barcode Generator

Generate CODE128, EAN and other common barcode formats as downloadable images.

What these tools cover

Strong random password generation, MD5/SHA-1/SHA-256 hashing of text or files, Base64 and URL encoding and decoding, and QR code and barcode generation you can download as an image.

Where the randomness and the maths come from

Browsers ship a cryptographically secure random number generator (crypto.getRandomValues()) and a full hashing implementation (the Web Crypto API, or SubtleCrypto). Both are the same primitives a native application would use, maintained as part of the browser rather than by us. Building on them means there is no home-grown cryptography here to get wrong.

Frequently asked questions

Is it safe to generate a password on a website?
It depends entirely on where the randomness comes from and whether the result is transmitted. Our generator uses crypto.getRandomValues(), the browser’s cryptographically secure random source, and the password is never sent anywhere — it exists only in your tab. A generator that produces passwords on a server, by contrast, means someone else’s machine has seen your password.
Are the hashes and encodings computed locally too?
Yes. Hashing uses the Web Crypto API built into your browser, and Base64 or URL encoding uses native browser functions. Nothing you paste is transmitted, which matters when the input is an API key, a token or a password.
Can these tools decrypt or reverse a hash?
No, and neither can anything else. A hash is one-way by design: SHA-256 of a value cannot be turned back into that value. Sites offering "hash decryption" are looking the hash up in a table of pre-computed common inputs, which only works for weak inputs like short passwords and dictionary words.
Should I use MD5 or SHA-1 for anything security-related?
No. Both are broken for security purposes — practical collision attacks exist for each. They remain useful for non-security checks such as verifying a file downloaded intact, which is why the hash tool still offers them. Use SHA-256 for anything where an attacker has a reason to forge a match.
Do QR codes generated here expire or track scans?
No. A QR code is just an encoding of the text or URL you typed — the data is inside the image itself, with no redirect service in the middle. It cannot expire, cannot be revoked, and cannot report scans to anyone. Free QR services that offer scan analytics work by pointing the code at their own tracking domain, which is also why those codes stop working if the service shuts down.
Is my WiFi password safe if I make a WiFi QR code?
It is safe from us — the code is generated in your browser and the password never leaves your device. Be aware, though, that anyone who can photograph the printed code can read the password out of it, so treat a printed WiFi QR code as you would a written-down password.

Browse other categories

PDF Tools

Merge, split, compress, rotate and convert PDF files without uploading them to a server.

Image Tools

Compress, resize, crop and convert images right in your browser, with no quality surprises.

Text Tools

Count, clean, format and compare text — from word counts to JSON formatting and diffs.

Converters & Calculators

Everyday unit, date and money maths: unit conversion, age, BMI, loan EMI and more.

Design & Dev Utilities

Colour, gradient, regex and code-formatting helpers for designers and developers.