Auth, Privacy & Validation Tools

Free online auth and privacy tools — a TOTP 2FA code generator, validators and sanitizers, all running client-side with nothing uploaded.

7 tools

Suspicious URL Check

Read a link before you click it: decodes punycode, spots the @ trick, mixed-script homographs and brand-in-subdomain. The link is read, never fetched.

2FA QR Builder

Build the otpauth:// URI for a TOTP or HOTP account and render it as a scannable QR code. SHA-1/256/512, 6–8 digits, 30–90s period. Nothing uploaded.

TOTP Generator

Generate time-based one-time passcodes from a Base32 secret using RFC 6238, entirely in your browser. Configure the algorithm, digit count, and refresh period.

Card Validator

Validate any card number with the Luhn algorithm. Detects Visa, Mastercard, Amex, Discover and more. Shows IIN, CVC length, and formatted display.

Email Validator

Check one address or a whole list for syntax errors, mistyped providers, disposable domains and role accounts. Nothing is uploaded or looked up.

Also in Auth, Privacy & Validation

Tools from other categories tagged with Auth, Privacy & Validation

CSRF Token Generator

Generate a CSRF token plus the exact Set-Cookie line, hidden input, meta tag and request header for synchronizer or double-submit setups.

JWT Decoder

Decode and inspect JSON Web Tokens. View header, payload, and signature. Detects expiry and maps all registered JWT claims.

Why These Tools

TOTP / 2FA Code Generator exists for the moment a 2FA integration breaks and the fastest way to find out why is to compute the expected code yourself instead of trusting a phone screen. otpauth:// QR Code Builder handles the setup side: fill in the account name, issuer, and Base32 secret, and it builds the standard otpauth:// URI and renders it as a scannable QR code that every major authenticator app understands. JWT Decoder sits here too by cross-link, filed primarily under Code & Dev, since a bearer token is as much an auth artifact as a one-time code is. Cookie inspection, XSS sanitizing and an email validator are queued next.