Tools

IT tools

Small, fast tools for everyday work. All of them run in your browser: nothing you type is sent to us or anywhere else.

Password generator and strength meter

Generates hard-to-guess random passwords and shows the rough strength of one you type. Randomness comes from the browser's cryptographic generator. Look-alike characters (l, I, O, 0, 1) are left out.

Loading the tool…

Hash calculator (SHA)

Computes the SHA-1, SHA-256, SHA-384 and SHA-512 digest of a text - handy for comparing a download's checksum. SHA-1 is no longer safe and is shown for compatibility only.

Loading the tool…

Base64 and URL encoding

Turns text into Base64 or URL encoding and back. Non-ASCII characters are handled as UTF-8. Base64 is not encryption: anyone can decode it.

Loading the tool…

JSON formatter and validator

Pretty-prints JSON, squeezes it onto one line, and says why when it is invalid.

Loading the tool…

JWT decoder

Makes a JSON Web Token's header and payload readable and shows when it expires. The signature is not verified.

Loading the tool…

UUID generator

Generates random (version 4) UUIDs for database rows, file names or test data.

Loading the tool…

IPv4 subnet (CIDR) calculator

From an IP address and prefix (like 192.168.1.10/24) or a mask, works out the network, broadcast, usable range and address count.

Loading the tool…

Unix time converter

Turns a Unix timestamp (seconds or milliseconds) into a date and a date into a timestamp - useful when reading logs.

Loading the tool…

QR code generator

Turns a link, Wi-Fi details or any text into a QR code you can download as SVG. The code is made in your browser.

Loading the tool…

Ethical security tools

Well-known, legal tools and services for defence and for checking your own systems. Use them only on your own systems or where you have permission; unauthorised scanning and testing is a crime in Turkey too (TCK 243-245).

Check and lookup services

  • Have I Been Pwned - Shows whether your e-mail address is in a known data breach.
  • VirusTotal - Scans a file or link with dozens of antivirus engines.
  • Qualys SSL Labs - Grades a site's HTTPS/TLS configuration.
  • Mozilla Observatory - Mozilla's check of a website's security headers and configuration.
  • securityheaders.com - A quick look at a site's security headers.
  • crt.sh - Lists every SSL certificate published for a domain.
  • urlscan.io - Opens a suspicious link in a safe place and shows what it does.

Tools you install

  • Bitwarden - Open-source password manager: a separate strong password for every site.
  • KeePassXC - Offline, open-source password manager on your computer.
  • Wireshark - The standard tool for looking at network traffic.
  • OWASP ZAP - OWASP's web application security scanner, for testing your own sites.
  • Nmap - Network discovery and port scanning - only on your own network or with written permission.

In Turkey

  • USOM - Turkey's national CERT: advisories and a list of malicious links.
  • EGM Siber Suçlarla Mücadele - The Turkish police's cyber crime unit: how to report and current warnings; in an emergency call 155.