Privacy & Security Tools
Strip location data from photos, encrypt files with a password, test password strength and verify downloads — with the browser's own cryptography, on your device. These are the tools where "no upload" isn't a feature; it's the entire point.
- Image Metadata Remover See what hidden data your photo carries
- File Encryption Tool Password-protect any file with AES-256-GCM
- Password Strength Checker An honest strength check: entropy math plus the pattern warnings that matter
- File Hash Checker Drop in a file, get its SHA-256 fingerprint, paste the publisher's checksum
- PII Redactor Paste text and the tool finds and masks personal data
Privacy tools that practise what they preach
A privacy tool that uploads your data isn't a privacy tool. Here, metadata cleaning, encryption, checksums and password utilities all run in your browser. Strip the hidden EXIF from a photo (GPS coordinates, camera serial, timestamps) before you share it; encrypt or decrypt a file locally; verify a download's checksum; or generate and assess a strong passphrase — none of it leaving your device.
That's the whole point: the sensitive input never reaches a server, so there's nothing to intercept, log or leak. Everything is computed with the browser's own cryptography and works offline.
Frequently asked questions
Why must security tools especially run client-side?
Because their inputs are the crown jewels: passwords, private photos, files worth encrypting. A "free online encryptor" that uploads your file has defeated its own purpose before it starts. Every tool here runs in your browser — verify by disconnecting from the internet.
Is browser cryptography real cryptography?
Yes — the Web Crypto API exposes the browser's native, audited implementations of AES-GCM, SHA-2 and PBKDF2, the same primitives TLS uses. It is not a JavaScript re-implementation; the browser calls the operating system's crypto libraries.
Can LazyTools recover an encrypted file or see my password?
No — there is no server component, no account, and no telemetry on inputs. That cuts both ways: a forgotten encryption password means the data is unrecoverable by anyone, including us.