Free security tools: passwords, WiFi codes, authenticator

A security tool is judged first by what it keeps, and these keep nothing. No account holds what you generate, no log records what you paste, and where a secret has to cross the network it crosses once, inside the encrypted connection, and is dropped. Each page says so in the same words, and says where the honest limit of that promise is.

Which tool answers which question

• A strong password, or a passphrase I can remember? The secure password generator draws three candidates from a cryptographic source, each with its entropy in bits and the time three kinds of attacker would need. Passphrases come from the EFF long wordlist.
• A two-factor code without an app? The two-factor authenticator computes TOTP codes in the browser from the secret a service shows at setup, and can seal that secret in a bookmark under your passkey, so the server never sees it.
• Let guests join the WiFi without reading the key? The WiFi QR code generator encodes the network for a scan, prints a guest card, and never stores the password or puts it in a link.

What none of them replace

A password manager, a second factor on the accounts that matter, and the recovery codes a service hands you when you enrol. A long random password defeats offline cracking and nothing else; reuse and phishing are defeated by habits, not by tools. For the two or three secrets that should never leave your own machine, a disk key or the master passphrase of a vault, use a generator that runs offline: that is the right answer, and it is not a web page.