DigiKitSecurity and Privacy Tools
6 tools for everyday security needs like password generation, PDF encryption, and data encoding.
Security is mostly a set of small habits: picking a password that's hard to guess, locking a PDF before you send it, or actually understanding what's inside a token you've been handed. Password Generator produces a strong password with adjustable length and complexity, PDF Password Protect locks a file before you share it, and PDF Password Remove strips a password from your own file when you already know it. Hash Generator produces a digest for a file or a string — useful for confirming two files are byte-for-byte identical. JWT Decoder makes a session token's contents readable, and Base64 Decoder handles the encoding that often shows up inside them. All of this runs in your browser; nothing is uploaded to a server.
What are these tools good for?
Security sounds like a big-system topic, but most everyday risk comes from a weak password or a document sent without protection. These tools cover those small, frequent situations.
- Password Generator: Create a hard-to-guess string when opening a new account, handing a temporary login to a colleague, or changing a Wi-Fi password.
- PDF Password Protect: Lock payslips, contracts or ID scans behind a password before they go out by email.
- PDF Password Remove: For a file whose password you already know, when you want to archive it or stop it asking for the password on your own computer. It does not open files for someone who doesn't know the password.
- Hash Generator: Check that a text or shared value hasn't changed by comparing it with a published digest.
- JWT Decoder: See what information an app's token is carrying. A JWT's contents are encoded, not encrypted.
- Base64 Decoder: Find out what a Base64 string hidden in a suspicious email or link actually says.
A sample workflow
An accounting office needs to send a client a signed contract. First, the Password Generator produces a long random password. PDF Password Protect locks the contract with it. The file goes by email, and the password goes through a separate channel such as a text message or a phone call. When the client wants to file the document in their own archive, they can use PDF Password Remove, since they know the password.
Tip
Base64 and JWT are often mistaken for encryption. Base64 is just an encoding that anyone can reverse, and a JWT's payload is readable even when it is signed. Never put passwords, card numbers or other secrets in a token or a Base64 field. A password manager, one password per account, and two-step verification wherever it's offered will do more for you than any single tool.