Free online tools that run in your browser
Your files never leave your device · No login required · 100% free
Convert, compress, calculate, generate, edit and check files right in your browser — fast, private and easy to use.
Search results
Popular tools
View all toolsBrowse by category
Popular file conversions
View all convertersProgramming
Learn and practise programming in your browser. Pick a language: write code, run it in a real terminal and follow the lessons step by step.
Why Shiklo Tools?
Simple, private tools that just work — right in your browser.
- Private Everything runs in your browser. Files are never uploaded.
- Secure Encrypted HTTPS connection, and nothing you open is stored on our servers.
- No login required No account, no sign-up, no email. Just open a tool and use it.
- Fast No upload or download wait — results appear instantly.
- Free All tools are free to use, with no limits.
- Works everywhere Phone, tablet or computer, in any modern browser.
🆕 New tools
★ Popular tools
Recently used
Frequently asked questions
Are my files or text uploaded anywhere?
No. Every tool runs inside your browser on your own device. Nothing you enter or open is sent to a server.
Do I need to create an account or log in?
No login is required. There are no accounts — open any tool and start using it straight away.
Are the tools really free?
Yes. All tools are free, with no limits or watermarks. The site is supported by ads.
Does it work on my phone?
Yes. The tools work in any modern browser on phones, tablets and computers.
Can I use the tools offline?
Once a tool has loaded it does its work on your device, so it keeps working even if your connection drops.
Which file types are supported?
PDF, Word, Excel, PowerPoint, OpenDocument and RTF documents, JPG, PNG, WebP, HEIC, AVIF, GIF and BMP images, MP4, MOV, WebM and MKV videos, MP3, WAV, M4A, OGG and FLAC audio, ZIP, 7z, RAR, TAR and GZIP archives, CSV, JSON, XML and plain text. Each tool lists exactly what it opens.
All tools with descriptions →
Password Strength Checker
Check how strong a password really is: common passwords, words, names, keyboard patterns and dates detected, crack-time estimates and tips.
Is your password as strong as you think? Many password meters only count characters and symbols, so they rate P@ssw0rd as strong. This checker uses zxcvbn, the open-source estimator created at Dropbox, which looks for the patterns real attackers try first: the most common passwords, English words and names, words with l33t substitutions (@ for a, 0 for o), keyboard patterns like qwerty, repeated characters, sequences like abc or 123, and dates and years.
Type or paste a password and you get a score from very weak to very strong, the estimated number of guesses needed, how long it would take to crack in four typical attack scenarios, the weak parts it found, and suggestions to improve it. Everything runs in your browser: the password is never stored, never added to the page address and never sent anywhere.
How to use Password Strength Checker
- Type or paste a password into the box (use Show password to see it).
- Read the score and the verdict.
- Check the crack-time estimates and the weak parts found.
- Follow the suggestions, or create a new random password with the Password Generator.
Features
- zxcvbn estimator: recognises common passwords, words, names and patterns.
- Score from 0 (very weak) to 4 (very strong) with a meter.
- Guesses needed and bits of strength.
- Crack times for online and offline attacks.
- The weak parts found and how to fix them.
- Runs in your browser: the password is never stored or sent.
The four attack scenarios
How fast a password falls depends on how it is attacked. An attacker guessing on a website's login page is slowed down by rate limits; an attacker who has stolen a database of password hashes can guess offline, and how fast depends on how the site hashed the passwords. The checker estimates all four cases from the number of guesses the password needs.
| Scenario | Guessing speed | Example |
|---|---|---|
| Online, rate-limited | 100 guesses per hour | A login page that locks or slows down after failures |
| Online, not limited | 10 guesses per second | A poorly protected login |
| Offline, slow hash | 10,000 guesses per second | Stolen hashes made with bcrypt or Argon2 |
| Offline, fast hash | 10 billion guesses per second | Stolen hashes made with MD5 or SHA-1 on GPUs |
What makes a password strong
Length and unpredictability. Attackers don't try every combination in order; they start with leaked password lists, dictionary words, names and common tweaks like a capital first letter and a number or ! at the end. So Summer2024! is weak even though it has every character type, while four random words such as correct horse battery staple are strong because there are so many possible combinations. A password made by a random generator, 14 or more characters long, is strong; one you invented is usually weaker than it feels.
Privacy of this checker
The password you type is analysed by code running in this page. It is not sent to a server, not saved in your browser, not added to the address bar and not logged. The zxcvbn dictionaries are downloaded with the page, so no lookup ever leaves your device. Even so, you may prefer to test a password that is similar to your real one rather than the real thing — the score will be about the same.
Beyond strength
A strong password still fails if it is reused: when one site is breached, attackers try the same email and password everywhere. Use a different password for every account, keep them in a password manager, and turn on two-factor authentication for important accounts — then even a stolen password isn't enough to get in. If a site tells you it has been breached, change that password and any others like it.
Frequently asked questions
Is it safe to type my password here?
The password is checked only in your browser and is never stored or sent anywhere. If you prefer, test a similar password instead.
Why is my password with symbols rated weak?
Common substitutions like @ for a and adding a year or ! are the first things attackers try. Length and randomness matter more than symbols.
What is zxcvbn?
An open-source password strength estimator created at Dropbox. It estimates how many guesses an attacker would need using real password patterns.
How long should my password be?
At least 14 random characters, or a passphrase of four or more random words.
Does it check if my password was leaked?
It detects passwords on common-password lists, but it doesn't check breach databases online, so nothing leaves your device.
What do the crack times mean?
They estimate how long guessing would take in four attack scenarios, from a rate-limited login page to fast offline cracking of stolen hashes.
How do I make a strong password?
Use a random password generator or four or more random words, and a password manager to remember them.
Related tools
Password GeneratorGenerate strong random passwords and memorable passphrases. Choose length and characters; see entropy and crack time. Never stored or sent.
PIN GeneratorGenerate secure random PIN codes of 4 to 12 digits that avoid common, repeated, sequential, year and date patterns. Made in your browser.
TOTP Code GeneratorLive 2FA codes (TOTP, RFC 6238) from a Base32 secret or otpauth link, with SHA-1/256/512, 6 or 8 digits and a QR code for testing.
API Key GeneratorGenerate secure random API keys, tokens and secrets of 128–512 bits in Base62, hex, Base64, Base64URL or Base32, with an optional prefix.
Hash GeneratorGenerate MD5, SHA-1, SHA-256, SHA-512, SHA-3, BLAKE3 and CRC32 hashes of text or files of any size, with HMAC and checksum comparison. Private.