Free Online Security & Config Tools

Security and config tools catch the small mistakes in credentials and settings files that are cheap to fix locally and expensive to fix after they reach production or a public repository. The .env file validator reads a pasted .env file and flags missing required keys, malformed lines, duplicate entries, and values that look like an accidentally committed API key or password, the kind of review a teammate would do if one were looking over your shoulder before a commit. The password and API key generator produces strong, random passwords or keys with adjustable length and character sets, alongside a live entropy meter so you can see, in bits, how resistant a given generated value actually is to brute-force guessing rather than trusting a vague label like strong or weak. Both tools are meant to run at the moment a value is created or a config file is about to be committed, not after the fact, and both run entirely client-side: no password, key, or .env contents are ever transmitted anywhere, which matters most exactly when the input is sensitive.