Free security tools that keep your secrets on your device
Generate strong passwords, check how strong or leaked a password is, encrypt files and messages, verify downloads, spot fake links, and check a domain's SPF, DKIM, DMARC and MX records.
- Your secrets never leave your device
- No sign-up, no accounts
- Defensive tools only
All tools
10 tools, all free, all private
Passwords
3 tools
Files and messages
2 tools
Email and links
5 tools
Popular shortcuts
One-click versions of the tools above
Why people use StoutNook
Your secrets stay with you
Passwords, files and messages are handled on your device. The two lookups that need a service send only what they must, and we say exactly what.
Defensive only
Tools to protect your own accounts, files and domains. Nothing for getting into anyone else's.
Free, no sign-up
No accounts, no email capture and no limits. Open a tool and use it.
Everyday security, without handing over your secrets
Start with a strong, unique password from the password generator, or a memorable one from the passphrase generator. Test one you already use with the password strength checker and the password leak check, which never sends your password anywhere.
Protect a document before you email it with file encryption, check a download with the file checksum calculator, and look at a suspicious link with the link safety checker before you click. Running a business domain? The SPF, DKIM and DMARC checkers and the MX lookup help stop others sending email in your name.
Frequently asked questions
Something else? Email hello@stoutnook.com.
Is StoutNook free?
Yes. Every tool is free to use as often as you like. We are supported by ads, which we keep away from the tools themselves.
Do you see my passwords or files?
No. Passwords, files and messages are processed by your browser on your own device and never sent to us. The password leak check sends only the first five characters of a hash of the password to Have I Been Pwned, and the email-record checkers send the domain name to a public DNS service. The privacy policy lists both.
Can I use these tools offline?
The password generator, strength checker, encryption and checksum tools keep working if you load the page and then disconnect. The leak check and the DNS checks need a connection to answer.