Free tools

Free security tools, without the adverts.

Small, honest tools we use ourselves. Everything runs in your browser where it can, nothing is sold, and you don't need an account.

Encrypted in your browser

Secure link share

Send a password or note as a link that works once, then deletes itself. Encrypted in your browser, so not even we can read it.

Create a secure link

Shows once, then it's erased for good
Not even we can read it: the key is only in your link
Deletes itself if nobody opens it, from 1 hour to 7 days

Made on your device

Password generator

Strong random passwords, made in your browser and never sent anywhere. No adverts, no sign up.

Make a password

Cryptographically random, never a pattern
Length from 8 to 64, with the characters you choose
Nothing is sent anywhere or kept, and no adverts

Checked without being sent

Password breach check

See if a password has turned up in a known data breach, without the password ever leaving your device.

Check a password

Compared against 900 million+ leaked passwords
Only 5 characters of a scrambled fingerprint leave your device
Tells you exactly what to do if it's found

30+ checks, in plain English

DNS report

Check a domain's nameservers, website, MX, SPF, DMARC and more, in plain English with how to fix each problem.

Run a DNS report

Straight from the registry and each of your nameservers
Website, MX, SPF, DMARC, DKIM, DNSSEC and CAA
Every problem says how to fix it, and downloads as a PDF

For wp-config.php and .env

WordPress salt generator

Fresh security keys and salts for wp-config.php, made in your browser. Change them after a hack to sign everyone out.

Make new salts

All eight WordPress keys and salts, 64 characters each
Made on your device, never fetched from a server
Signs out every stolen session after a hack

By our sister site, SitePulse

WordPress security scan

A free check of your WordPress site from the outside, by SitePulse: the versions it gives away, files that shouldn't be public and common weak spots.

Scan with SitePulse

Spots outdated WordPress, plugins and themes
Finds exposed files and settings attackers look for
Results in seconds, no plugin to install

Hardened WordPress hosting

Security that doesn't stop at passwords

Our UK WordPress hosting comes with a firewall, malware scanning twice a day and isolated accounts as standard, and we clean hacked sites within 24 hours.

See the plans Hacked right now?