Password Policy Checker - Online Test Against Rules
Define minimum length, uppercase, digits, special chars, and check if a password meets your custom policy. Instant feedback.
UD5 Toolkit
Check if your password has been exposed — safely with k‑anonymity
Your password never leaves your browser. Only a partial hash is sent to the API.
Contacting breach database (k‑anonymity safe)...
Instead of sending your actual password, this tool:
Define minimum length, uppercase, digits, special chars, and check if a password meets your custom policy. Instant feedback.
Enter a website and check which security headers (HSTS, CSP, X‑Frame‑Options) are present. Get a security grade.
Enter a domain and see its SSL certificate details: issuer, validity dates, and chain. Client‑side fetch.
Display your effective connection type (4g, 3g, etc.) and downlink speed using the Navigator API. Adapt your app accordingly.
Enter a router's MAC address or serial and generate the common default WPA passphrase for major ISP brands. Educational purpose only.
Validate a DNSSEC chain by entering DS and RRSIG records. Verify that signatures match. Educational. Local algorithm.
Test if a script or style will be allowed by a given CSP. Compute hash/nonce. Strengthen your site’s defense against XSS. Local.
Generate a Contributor Covenant or custom Code of Conduct for your project or event. Ready to paste into your repo.
Paste the Permissions‑Policy header and get a human‑readable table of allowed/blocked browser features. Understand how your site is restricted.
Tell the tool what base liquor and mixers you have, and it suggests classic cocktails. Simple database. Cheers!
Convert integers into short, unique, YouTube‑style IDs (hashids) and decode them back. Customize salt and minimum length.
Check if the browser has captured the beforeinstallprompt event. Understand why your PWA is (or isn't) installable.
Create a random long password that alternates consonants and vowels to mimic a pronounceable word. XKCD meets CVCV. Local.
Evaluate password strength through a short interactive story where each character set adds lines to a narrative. Educational fun.
Type a password and see a bar that fills based on estimated bits of entropy. Color‑coded feedback. No storage.
Type any character and see how it renders in different font stacks. Detect missing glyphs and fallback behavior.
Create secure passwords that look like gibberish words but are easy to pronounce and remember. Mix of syllables. Local generation.
Store passwords and notes encrypted with a master passphrase. Data lives only in your browser's localStorage. No cloud.
Look at HTTP headers and JavaScript objects to guess which browser extensions might be installed. For awareness.
Enter a package name and version range to see all satisfying versions from the registry. Understand ^ and ~.
Create a strong, memorable password using 4 random common words. The famous xkcd method. Local wordlist.
Check if an IBAN has the correct length and structure for its country. Early validation, no bank connection.
Drop an image that might have wrong extension and see its real format (JPEG, PNG, WebP) based on header bytes.
Enter a URL and see its favicon at all standard sizes. Check if it's properly defined. SEO basic check.
Compare your password against a built‑in list of the 10,000 most common passwords. Instant warning if it appears.
Trace the full redirect path of a URL. See every hop, status code, and final destination. Detect broken chains.
Paste your email body and subject, and get a spam score based on common trigger words and patterns. Improve your cold outreach.
Type a word to see all its homophones with definitions. Avoid embarrassing mistakes (their/there/they’re). Static dictionary.
Enter a year to check if it is a leap year. Shows the rule explanation and next/previous leap years. Simple reference.
Find out if a word is an isogram (no repeating letters). Different types: first-order, second-order. Word nerd fun.