Cyber & Privacy Tools: Password, Phishing, CSP, Firewall and Security Helpers

This is the corner I send people to when something feels off. Nothing’s on fire. You’ve just got that itch. Maybe a password you’ve reused one too many times, or a link that smells wrong the second it lands in your inbox. Everything here runs in your browser. I never see a thing you paste. No account, no catch, and honestly I’d be suspicious of any “free security tool” that asked for one.

Password GeneratorStrong random passwords and passphrases, all in your browser. Pick the length and the character set, watch the entropy and crack time update live, and nothing ever leaves the page.Password Strength CheckerPaste a password. I’ll tell you how flimsy it really is, which is usually flimsier than you’d hope. Stays in your browser the whole time.Breach-Safe Email CheckerWalks you through checking whether an address has turned up in a leak somewhere. You don’t hand your inbox to anyone to find out.Phishing URL ChecklistGot a link you don’t trust? Drop it in. I’ll point out the little tricks scammers love to hide right out in the open.Security Headers CheckerFind out which headers your site is missing. And which ones are just sitting there, quietly doing nothing useful.CSP Header BuilderContent Security Policy is fiddly, and one wrong directive breaks your whole page. This hands you a sane starting point.Firewall Rule HelperTell it what to allow or block. It drafts the actual rules for UFW, iptables, Nginx or Cloudflare so you don’t have to remember the syntax..htaccess Redirect GeneratorI can never keep the exact Apache syntax in my head, so I built this to spit out the redirect for me.Robots.txt GeneratorDecide what crawlers get to see. The templates are sensible, so you won’t accidentally wall off your entire site from Google.Email DNS Health CheckerMail keeps landing in spam? Nine times out of ten it’s SPF, DKIM, DMARC or MX misbehaving. Check them here.

Security and privacy helpers

No login. Nothing to download either (a credit card never even comes up). Each one does a single job fast, then gets out of your way, which is how I think tools like this should work (your mileage may vary). And since whatever you type stays right there on your machine, you can poke at a real password or a real domain you actually own, no worrying about who’s reading over your shoulder. Start wherever your problem is. Skip the rest.

Server Tools Email Security Tools All Online Tools

Sources & further reading

OWASP, Top Ten