tools index

The toolkit.

Every browser tool below is free. No account. No tracking. No upload. Your data is encrypted on your machine and never touches a server. Pick one based on what you're protecting and how you'd lose it.

↓

Encrypt & Decrypt Anything

The general-purpose deniable encryption tool. Type or upload anything, set two passwords, get one ciphertext plus two control files: one revealing your real message, one revealing a decoy. Decrypt mode is built into the same page. Optional live realism engine generates shape-correct decoys (API keys, IBANs, JWTs, seed phrases) tailored to your real input. This is the engine the rest of the toolkit is built on.

Free · No account needed

Protect

Encrypted Vault

Cloud-synced storage for control files, passwords, and small secrets. Encrypted in your browser before upload, so we only ever see ciphertext. Decoy mode for pre-positioned plausible alternatives.

Free tier

// the realism engine

Decoys you couldn't write yourself.

The realism engine generates shape-correct, validator-passing decoys across sixty-nine credential types: API keys, crypto wallets, healthcare records, bank and securities identifiers, government IDs. Declare the type, get a fake that passes the same checks the real one would. The engine sees the type. It never sees your real secret.

69 credential types

25 deterministic validators

2 modes: bundle & live

MIT licensed engine

OpenAI key

sk-proj-1a2b3c4d5e6f7g8h9i0j1k2l3m4n5o6p7q8r9s0t…

BIP39 phrase

include error famous fantasy parade mountain spatial void stumble loyal shop segment

IBAN

FR47 3915 7204 8629 1048 57

Postgres URI

postgres://admin:x7kQ9mP2rL4vW8nJ@db-prod-01.acme-internal.net:5432/maindb

JWT

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzQ1NiIsImlhdCI6MTcxNTAwMDAwMH0…

Credit card

4532 1872 3456 7891

Click the refresh icon on any card to generate a fresh decoy from the live engine.

All sixty-nine credential types, by category

Cloud, API & infrastructure (32)

stripe-test-key stripe-live-key github-pat-classic github-pat-fine openai-key anthropic-key resend-key aws-access-key jwt-token private-key-pem postgres-uri mongodb-uri slack-bot-token slack-user-token discord-bot-token digitalocean-pat gcp-api-key gcp-service-account-key azure-client-secret azure-storage-key twilio-auth-token sendgrid-key huggingface-token npm-publish-token pypi-token gitlab-pat mailgun-api-key linear-api-key notion-token shopify-token square-token cloudflare-api-token

Crypto wallets (4)

bip39-phrase ethereum-private-key bitcoin-wif solana-private-key

Healthcare (5)

uk-nhs-number us-npi us-dea-number us-medicare-mbi us-ndc

Finance & securities (10)

iban credit-card lei isin cusip us-ein duns us-routing-number us-bank-account bic-swift

Government & identity (8)

us-ssn uk-ni-number us-itin passport-mrz us-passport uscis-number aadhaar eidas-id

Network, device & contact (8)

email-address phone-e164 ipv4-address ipv6-address mac-address imei vin uuid

Unstructured catch-alls (2)

generic freeform-secret

Validators include Luhn (credit cards), mod-97 (IBANs), BIP39 checksum, JWT structural, PEM tag, NHS Modulus 11, US SSN structural, UK NI prefix rules, Bitcoin Base58Check, and E.164 phone format. Examples above are real engine output, regenerable on click. Read the architecture.

Try the live engine

Extend