Free Security Tools for Passwords, Headers and Disclosure Files
Generate strong credentials, security headers and responsible disclosure files without sending sensitive input to an unnecessary server. No signup or installation required.
Choose the task you need to complete
Passwords and integrity
Secure Password Generator
Generate strong, random passwords locally on your device.
Create with Secure Password Generator SecurityPassword Strength Checker
Evaluate password length, patterns and character diversity locally.
Check with Password Strength Checker SecurityPassword Entropy Calculator
Estimate password search space, entropy and brute-force ranges locally.
Use Password Entropy Calculator SecuritySRI Hash Generator
Generate SHA integrity attributes for pasted script or stylesheet content.
Create with SRI Hash GeneratorBrowser and server protection
HTTP Security Headers Checker
Inspect security-related response headers from a public website.
Check with HTTP Security Headers Checker SecurityContent Security Policy Generator
Build a practical CSP header from guided source directives.
Create with Content Security Policy Generator SecuritySecurity Headers Generator
Generate common HTTP security headers for Apache or Nginx.
Create with Security Headers Generator SecurityCORS Header Generator
Build controlled Cross-Origin Resource Sharing response headers.
Create with CORS Header Generator SecurityPermissions Policy Generator
Create a Permissions-Policy header for browser features and allowed origins.
Create with Permissions Policy Generator SecurityReferrer Policy Generator
Choose and generate a Referrer-Policy HTTP header and meta tag.
Create with Referrer Policy Generator SecuritySecure Cookie Builder
Build a Set-Cookie header with secure scope, lifetime and SameSite attributes.
Use Secure Cookie BuilderVulnerability disclosure
Free Security Tools for Passwords, Headers and Disclosure Files
Generate strong credentials, security headers and responsible disclosure files without sending sensitive input to an unnecessary server. Each utility concentrates on one clear task, making it easier to get a useful result and continue working.
Start with the group that matches your goal, then follow the related-tool suggestions for the logical next step. Most processing happens in your browser, without an account or unnecessary uploads.
Security tools questions
Are values sent to Elevoire?
The listed local security utilities perform their core processing in your browser wherever possible.
Do generated headers fit every website?
No. Security policies must match the resources and features a particular site actually uses, so test before deployment.