Why this site exists

Password tools are often gates to something else: a sign-up form, an app download, or an email subscription. This site does not do any of that. The tools run entirely in your browser, produce no server-side logs of your activity, and require nothing from you in return.

Good password hygiene is not complicated — but it requires a few specific habits: unique passwords per site, sufficient length, and a reliable way to store them. The guides on this site exist to explain those habits plainly, without padding.

About the author

This site is written and maintained by Aisha Rahman, a security writer and web developer interested in making practical security information accessible. The tools are built with plain HTML, CSS, and JavaScript — no frameworks, no build step, no tracking scripts.

The site is a ZAHA Lab project, operated by Kokal Operations Ltd, a company registered in England and Wales.

How the tools work

Password Generator

Uses crypto.getRandomValues() — your browser's CSPRNG — to select each character from the chosen pool. The selection is done on your device; no network request is made. You can save the page and use it offline.

Strength Analyser

Calculates entropy based on the detected character set and length, then checks for common structural patterns that reduce effective strength. All computation happens in-browser. No password is stored or sent anywhere.

Breach Check Guide

This page is educational. It explains the k-anonymity range-query technique used by reputable breach-checking services. We do not perform live lookups because doing so correctly requires infrastructure we don't run — and we'd rather explain the right method than fake a lookup.

Affiliate disclosure

Some content on this site — particularly in the security guides — mentions categories of products such as password managers. Where a guide links to a product or service, it may use an affiliate link. This means we may receive a small commission if you purchase through that link, at no additional cost to you.

Affiliate relationships do not influence editorial content. We do not mention or recommend products we would not use ourselves, and we do not accept payment for positive coverage. If a product has drawbacks, we say so. See our Privacy Policy for full details.