Clean a photo
Resize, convert and redact an image, and strip its location and camera data.
Runs on your devicePrivacy tools
18 tools, free and without an account. Each one says where its work happens, so you know what leaves your device before you start.
Showing every tool
No tools match those filters. Clear the search or choose All tools.
Files and images
Work on a file without uploading it. Re-encoding writes a fresh file, so the original metadata does not travel with it.
PDF redaction
Mark private areas and rebuild every page as pixels, so covered text is gone.
Runs on your devicePDF metadata remover
Inspect the document properties, then rebuild a copy that does not carry them.
Runs on your deviceEncrypt a file
Seal any file with a passphrase using AES-256-GCM, then decrypt it on another device.
Runs on your deviceFile checksum
SHA-256 and SHA-512 digests, for checking that a download matches what was published.
Runs on your deviceAccounts and passwords
Passwords and passphrases are generated on this device. The breach check sends five characters of a hash and nothing else.
Password and passphrase generator
Random passwords and multi-word passphrases, built with the browser crypto API.
Runs on your deviceBreached password check
Compare a password against known breaches with a five-character hash prefix.
Uses our server, explainedBrowser and network
See what a site can read about the connection and the browser it was given.
My IP and WebRTC
The address this connection uses, and whether WebRTC offers a local address.
Uses our server, explainedBrowser privacy report
The header, screen, language and rendering signals that make one browser stand out.
Runs on your deviceSharing and codes
Links are encrypted in your browser before they are stored, and the key stays in the link fragment.
Private text link
Send text through a link with an expiry, a view limit, a password or burn after reading.
Encrypted here, stored sealedOne-time secret
Share a password or a key through a link that opens exactly once.
Encrypted here, stored sealedQR code generator
Turn text, a link or Wi-Fi details into a code drawn in your browser.
Runs on your devicePages that belong to an account, or that preview something before it is written.
Encrypted paste
Send text through a link with an expiry, a password, a view limit, or burn after reading.
Uses our server, explainedOne-time secret
Share a password or key through a single-use encrypted link.
Uses our server, explainedImage cleanup
Compress, resize, convert, and strip metadata without uploading the original.
Uses our server, explainedGoogle Keep import
Preview a Takeout export in the browser, then choose Notes or Vault before importing.
Uses our server, explainedNote templates
Starting points for meeting notes, weekly reviews, project briefs, packing, interviews, and trips.
Uses our server, explainedGoogle Keep import
Choose a Takeout ZIP, the Keep JSON files, or the unpacked Keep folder. Every note is previewed in your browser, and you pick Notes or Vault before anything is written.
One-time secrets
A one-time secret is a private link with a single view. Use it for a password, a licence key or a connection string that should not sit in an inbox.
- Encrypted in your browser before it is stored
- The link is revoked after the first retrieval
- An optional password goes through another channel
- Revocable at any time before it is opened
Image metadata, explained
Photos often carry EXIF data: the camera model, the time, and sometimes GPS coordinates. Re-encoding an image in the browser writes a fresh file, so that metadata does not survive the trip.
What re-encoding cannot do
It cannot remove what is visible in the picture. Blur or cover a face, a plate, or a document before you publish the file, using the redaction tool on the image page.
What these tools do not do
Privacy tools are easy to oversell. These are the limits worth knowing before you rely on any of them.
- None of them make you anonymous. A website still sees the address your connection comes from.
- The IP check reports what this server can see and what a network lookup returns. It cannot prove whether a VPN, proxy, or relay is in use, so it never claims to.
- The fingerprint report describes what a page can read from your browser. It cannot stop that reading or hide it.
- Two checks can contact an outside service. The breached password check sends a five-character SHA-1 hash prefix through this server to the Have I Been Pwned range API. My IP can ask IPinfo for country and network details when that lookup is configured. Other local utilities process their input in your browser; notes and private sharing use this server.
- The PDF tools rebuild every page as an image. That removes searchable text, links, forms, signatures, and accessibility structure along with the source metadata.
- File encryption protects the file, not the password. If you lose the password, the file cannot be recovered by anyone, including us.
Do these tools collect anything?
Passwords, files, links, hashes, QR contents, and fingerprint reports are handled in the page and are not sent to the server. Only a link you explicitly create is stored, and it holds encrypted content. The IP check answers from the request this server already received, and the breach check sends a five-character hash prefix to this server, which relays it to an outside service.
Why does the IP check need a server at all?
A page cannot see the address your request came from, because that address is on the server side of the connection. The tool reports what this server observed and adds country and network details from a lookup service when those are missing. The result is not written to a database and the response is marked no-store, so it is not cached on the way back to you.
Is it safe to type a real password into the breach check?
The password itself never leaves the page. The browser hashes it, keeps the full hash local, and sends only the first five characters so the service can return every matching hash ending. That range technique is why the lookup does not reveal which password you asked about. If you would rather not type a real one, test a password you no longer use.
Why does PDF redaction flatten the document?
Drawing a black box over a PDF leaves the original text in the file. Flattening renders fresh page pixels, paints the private areas into those pixels, and creates a new document without the source text layer or active features.
Why does the Keep import need an account?
Importing writes the notes into the account you pick. Notes needs a signed-in session. Vault also needs its key, which exists only in the browser after you unlock it. The picker opens once you are signed in, so a preview is never built and then lost on the way in. The preview never leaves the page, and it is not written to browser storage.
Can I use these tools on a phone?
Yes. Every tool on this page works in a modern mobile browser, including iOS Safari and Chrome on Android. The heavier ones, such as file encryption and PDF rebuilding, are easier on a desktop because of the file picker.