Utility Tools

About Utility Tools

This is the category for tools that don't belong to a category. A QR code for a poster. A password for an account you're setting up right now. A random number to settle something. A timer, because the one on your phone is in the other room.

The password tools deserve a note, because they are the ones where implementation quality genuinely matters. The generator draws from crypto.getRandomValues(), the browser's cryptographically secure random source, not Math.random() — which is fast, predictable, and completely unsuitable for anything you will actually rely on. Generated passwords are produced in your browser and never transmitted, so the string you copy has existed in exactly one place.

The strength checker estimates entropy from length and character variety, and it is worth understanding what that can and cannot tell you. Entropy measures resistance to brute force. It does not know that your fourteen-character password is a song lyric, or your child's name with a 1 on the end, or one of the hundred million strings already sitting in a breach corpus — all of which fall instantly to a dictionary attack regardless of what the meter says. A high score means the password is long and varied. Only randomness at generation time makes it genuinely strong.

Utility Tools — Frequently Asked Questions

Are generated passwords sent anywhere?

No. Generation happens in your browser using crypto.getRandomValues(), the platform's cryptographically secure random number generator. The password exists in your tab and in your clipboard when you copy it — there is no network request, and we never see it.

Do QR codes generated here expire?

No, and they can't. A QR code is a direct visual encoding of the data you typed — the image contains your URL or text, not a reference to a record on our servers. Nothing points back at us, so there is nothing to expire, rate-limit or take down. Download it and it works forever.

What actually makes a password strong?

Length first, then unpredictability. A random sixteen-character string beats a clever eight-character one by an enormous margin, and both are beaten in practice by a passphrase of five or six genuinely random words, which is far easier to type and remember. What breaks passwords in the real world is reuse and predictability, not insufficient symbols — so a password manager with unique generated passwords per site beats any memorisation strategy.

How random are the dice and number generators?

They use the same cryptographically secure source as the password generator, so the distribution is uniform and the output is not predictable from previous results. That is considerably stronger randomness than a physical die, which has manufacturing bias — though for settling an argument, either works.