Security tools
Bullying Incident Documentation Generator
A calm, judgment-free way to document a bullying incident -- date, what happened, witnesses, who you've already told, and what follow-up is needed -- into a clean record you can copy or print for the school. Nothing you type is saved or sent anywhere; it exists only in your browser.
Credit Freeze & Identity Theft Action Checklist
Data breach notices already topped 471 million in the first half of 2026, more than all of 2025 (297.5 million), according to Identity Theft Resource Center data. This is an educational checklist and a tracker for freezing your credit file at all three bureaus, with direct links to each bureau's own official freeze page -- it is not a form, and it never asks for your SSN, date of birth, or address.
Dice Roller
Free online dice roller — roll any number of dice with any number of sides (not just standard d4/d6/d20), with a running roll history and no ads.
Domestic Violence Safety Plan Generator
A private, judgment-free way to organize a personal safety plan -- a safe place to go, a code word with people you trust, documents to have ready, emergency contacts, and a safe way to communicate. Nothing you type is saved or sent anywhere; everything stays in your browser and disappears when you leave the page. Always-visible Quick Exit button and the National Domestic Violence Hotline (1-800-799-7233) throughout.
EXIF Remover
Strip GPS coordinates, camera model, and every other EXIF tag from a photo — orientation is baked into the pixels first, so (unlike some strippers) your photo never ends up sideways.
Fake IBAN Generator
Free fake IBAN generator for 14 countries with valid mod-97 checksums, for testing payment forms and fintech apps — no real bank account is attached. Unlike two popular generators we checked (10015.io, fakeiban.org), this one shows the exact checksum math (letters-to-digits, the mod-97 remainder, the final check digit) so developers can verify it themselves instead of trusting a black box, and displays a prominent test-data-only warning that neither competitor shows on-page.
Family Verification Safe Word Generator
Generate a random, memorable two-word safe phrase your family can agree on in advance and use to verify identity if someone calls claiming to be a relative in an emergency. AI voice-cloning scams are rising fast — a 2026 industry report found 1 in 4 Americans received a deepfake voice call in the past year, and scammers can clone a voice from just 3 seconds of audio.
Fire Escape Plan Generator
Describe your home's floors and bedrooms and get a plain-language two-route escape plan for each area, plus a safe-charging checklist for phones, laptops, and e-bikes -- no drawing tools, no sign-up.
Hidden Unicode / AI Prompt Scanner
Scan text live for invisible Unicode characters — the Unicode Tags block and bidi overrides are flagged High risk (the exact categories documented in real AI agent prompt-injection research), while common zero-width, NBSP, and BOM characters are flagged Low.
List Randomizer
Free list randomizer / random name picker for raffles, giveaways, and team assignment — with a 'remove picked entries' toggle on by default, so drawing 1st, 2nd, and 3rd place in a row never repeats a winner. We checked two popular pickers (gigacalculator.com, randomlists.com) directly and neither documents this mode. No ads anywhere in the working area, by this site's design.
Package Theft / Porch Piracy Prevention Checklist
An interactive checklist of real prevention steps for package theft (porch piracy), plus a clear explanation of what carrier default liability (usually ~$100) actually covers -- and why it usually does NOT cover a package stolen after it was already delivered.
Password Generator
Generate cryptographically random passwords instantly — up to 128 characters, up to 20 at once, with an option to exclude ambiguous characters and a live strength meter.
Password Reuse Exposure Calculator
See the illustrative blast radius of reusing one password across accounts — enter how many accounts share it and whether they include email, banking, or social accounts, and see how many become at-risk if just one of those sites leaks. 100% client-side: never accepts or transmits an actual password.
Password Strength Checker
Check a password's real-world strength using pattern-based analysis (not raw entropy) — see exactly why it's weak and what to change, entirely in your browser.
Photo Privacy Checker
Check a photo for hidden GPS location live — nothing is ever uploaded. Works with JPG, PNG, WebP, and HEIC/HEIF (iPhone photos). A red banner and map link show exactly where it was taken; a green banner confirms when it's clean; an amber banner is honest when metadata can't be fully verified rather than falsely claiming safety. Download a copy with all metadata removed in one click.
Random Number Generator
Free random number generator with custom range, decimal-place support, no-duplicates mode, and sorting — using the Web Crypto API (crypto.getRandomValues) as its randomness source, and saying so on the page. We checked two popular generators (commentpicker.com, calculatorsoup.com) directly: both are integer-only with no decimal option, and one only vaguely calls itself a 'PRNG' without naming its actual source.
From the blog
How to document a bullying incident before reporting it to school
A clean written record makes it much easier for a school to act -- here's what to include, and why writing it down matters, for National Bullying Prevention Month.
2026-10-01 Working smoke alarms cut your fire death risk 60%. Most families still don't have two ways out planned.
NFPA data shows three in five home fire deaths happen where alarms are missing or dead. This generator turns your floor/room layout into a written primary and backup escape route for every bedroom, plus a safe-charging checklist for Fire Prevention Week 2026.
2026-09-30 Your package got stolen from the porch -- does UPS or FedEx actually owe you anything?
About 104 million packages are stolen in the U.S. each year. The carrier's default $100 liability usually doesn't cover theft after a successful delivery -- here's what does.
2026-09-30 94% of leaked passwords were reused. Here's how to think about your own blast radius
A single reused password isn't one point of failure -- it's as many points of failure as accounts that share it. A simple way to see your own exposure without ever typing the password itself.
2026-09-29 How to make a domestic violence safety plan -- a private, judgment-free starting point
A safety plan doesn't have to mean leaving right now. Here's what goes into one, why it matters during Domestic Violence Awareness Month, and how to keep it private.
2026-09-29 2026 already broke the data breach record -- here's the credit freeze checklist that actually matters
Over 471 million breach notices in just the first half of 2026, more than all of last year. Freezing your credit at all three bureaus is free and takes about 15 minutes total.
2026-09-29 AI voice cloning can fake a family member's voice in 3 seconds — here's a low-tech defense
1 in 4 Americans received a deepfake voice call in the past year. A pre-agreed family safe word is one of the few defenses that doesn't depend on spotting the fake in real time — here's how to set one up.
2026-09-27 Remove a photo's metadata the naive way and it can come out sideways. Here's why, and how this tool avoids it.
Cameras often store rotation as a tag, not in the pixels — strip that tag without applying the rotation first and the photo reverts to sideways. This remover bakes in orientation before the metadata disappears.
2026-09-14 Passkeys Just Passed 5 Billion — But Most Accounts Still Run on Passwords
Passkey sign-ins now succeed 93% of the time versus 63% for passwords, and global adoption has crossed 5 billion. But 87% of organizations still use passwords for customer logins — here's why passwords aren't going away yet, and how to make the ones you still use stronger.
2026-09-04 Most online dice rollers only let you pick real dice shapes — this one rolls a d3 or a d47 just as easily
A d4, d6, d8, d12, and d20 exist as physical objects. A d3 or a d15 doesn't — but plenty of games and decisions still need one. Most dice roller sites simply refuse.
2026-09-02 Two fake IBAN generators say their output 'passes validation.' Neither shows the math.
We checked 10015.io and fakeiban.org directly — both claim mod-97 compliance but neither one shows you the actual checksum calculation. So we built one that does.
2026-09-01 Drawing 1st, 2nd, and 3rd place with a random name picker? Watch out for repeat winners.
We checked two popular name pickers directly — neither documents a way to stop the same name from winning twice across separate draws.
2026-09-01 Two random number generators. One won't give you a decimal. The other won't say how random it is.
commentpicker.com and calculatorsoup.com are solid tools — but neither supports non-integer results, and one just calls itself a 'PRNG' without naming an actual source.
2026-09-01 Most invisible-character checkers treat every hidden character the same. Only some of them are the ones real attacks actually use.
We checked two invisible-character tools directly — one is genuinely live but never mentions AI agents at all, the other needs a button click despite its name. Neither separates the character categories that 2026 security research actually documented as AI agent injection vectors from the ones that are just copy-paste accidents. Ours does.
2026-08-30 A location-privacy tool that requires you to upload the photo to check its location. Read that again.
We checked pic2map.com directly — a photo-location viewer whose own terms say uploading is required. We also found viewers and removers split across separate tools. This one checks and removes GPS in the same screen, and nothing ever leaves your browser.
2026-08-30 How long should a password be? A free generator that shows the math
NIST's current guidance asks for at least 15 characters when a password is your only login factor. Here's what that means in bits of entropy, how character sets change the number, and a generator that makes up to 20 random passwords at once.
2026-08-29 A Concordia University study found major password meters give "blatantly misleading" scores. We tested "password123456" to see why.
Academic research has found that entropy-based password meters create a false sense of safety — a long password can score well while still being trivially guessable. We fed "password123456" (14 characters) into our own tool and it correctly called it weak, in two seconds, and said exactly why.
2026-08-29