LazyTools

🔒 Every tool runs in your browser — the files and values you enter are never uploaded to any server. How it works

Generators

Passwords, UUIDs, QR codes, random numbers and placeholder text — generated with the browser's cryptographic randomness where it matters, on your device. A password a server generated is a password a server has seen; here, nothing leaves your browser.

Generate locally, share deliberately

QR codes, strong passwords, UUIDs, barcodes, and Wi-Fi and vCard QR codes are all produced on your device. That's more important than it sounds: many online QR generators encode your Wi-Fi password or contact details on their servers, where the payload can be logged. Here the code is drawn in your browser, so the thing you're encoding — a password, a network key, a private address — is never transmitted.

Passwords and UUIDs use the browser's cryptographically-secure random source, not a weak Math.random(). Generate what you need, then choose to share it — nothing is sent anywhere by default, and it all works offline.

Frequently asked questions

Why does it matter that generators run client-side?

Because generated output is often a secret from the moment it exists: a password, an API identifier, a QR code pointing at a private link. A server-backed generator has seen every one it ever produced. These run on your device — the output exists only in your browser's memory until you copy it.

Is the randomness actually secure?

The password, UUID and random-number tools use crypto.getRandomValues and crypto.randomUUID — the browser's cryptographically secure random source, the same one TLS uses — with rejection sampling to avoid modulo bias. None of them touch Math.random().

Do the QR codes expire?

No. Many "free" QR services encode a redirect through their own domain so they can track scans — and the code dies if their service does. Ours encodes your content directly, so the code works forever and nobody counts the scans.