🛡️ Privacy Skill Vault — Tool Documentation

Comprehensive guide to the browser-native security utilities available in Privacy Skill Vault. All processes execute 100% client-side using standard Web Cryptography APIs (crypto.subtle), ensuring your plain text and credentials are never stored or transmitted to remote servers.

📄 Quick Table of Contents

1. Secure Secret Share

Ephemeral Secret Share Zero-Knowledge

What It Is: An end-to-end encrypted messaging engine that burns payloads after a single view or 24-hour expiration.

Why It Is Required: Prevents leaving readable passwords or tokens in permanent chat logs and email servers.

  1. Navigate to Secure Secret Share > Ephemeral Secret Share.
  2. Type your confidential text or attach a file (Max 2MB).
  3. Click Generate One-Time Link.
  4. Copy and send the generated link to the recipient.
  5. When opened, clicking Reveal & Destroy Secret decrypts the note locally and permanently deletes the payload from the server.

2. Cryptography Tools

AES Encryption / Decryption

What It Is: Symmetric authenticated encryption engine using standard AES-256-GCM.

Why It Is Required: Protects plaintext data from eavesdropping and tampering during transit or storage.

  1. Enter a secret passphrase.
  2. Input the target plaintext message.
  3. Click Encrypt (AES-GCM) to compute the ciphertext.
  4. To decrypt, paste the Base64 ciphertext, re-enter the passphrase, and click Decrypt.

RSA Key Generator

What It Is: Generates asymmetric RSA Public/Private key pairs (2048 or 4096-bit).

Why It Is Required: Needed for asymmetric encryption pipelines, SSH authentication, and digital signatures.

  1. Select the key bit size (2048 or 4096).
  2. Click Generate RSA Pair.
  3. Copy and store the exported SPKI Public and PKCS#8 Private PEM key blocks.

Random Key Generator

What It Is: High-entropy random byte sequence generator backed by crypto.getRandomValues().

Why It Is Required: Generates secure encryption keys and seeds immune to pseudo-random prediction attacks.

  1. Select 128-Bit, 192-Bit, or 256-Bit key length.
  2. Click the button to output a cryptographically secure Hex string.

3. Hashing & Integrity Tools

MD5, SHA-1, SHA-256, & SHA-512 Hash Generators

What They Are: Cryptographic hash functions that transform strings into fixed-size checksum digests.

Why They Are Required: Used to verify file integrity and check data for unauthorized alterations.

  1. Select your target hash algorithm (e.g., SHA-256).
  2. Type or paste your plaintext into the input area.
  3. The computed digest updates automatically in real-time.

HMAC Generator

What It Is: Hash-based Message Authentication Code calculated using a secret key and a digest algorithm.

Why It Is Required: Verifies both data integrity and message authenticity between two parties.

  1. Enter the shared secret key.
  2. Input the message payload.
  3. Click Compute HMAC to display the resulting signature.

4. Encodings & Conversion Tools

Base64, URL, HTML, Hex, & Binary Converters

What They Are: Data format converters that translate plaintext into standardized network-safe representations.

Why They Are Required: Essential for safe data transmission, XSS prevention (HTML escaping), and low-level protocol inspection.

  1. Select the desired encoding tool.
  2. Paste your input data.
  3. Click the Encode or Decode button to process the text.

5. Password & Secret Management

Strong Password Generator

What It Is: An entropy-focused password generator powered by browser hardware-backed random sources.

Why It Is Required: Prevents dictionary brute-force and credential-stuffing attacks.

  1. Adjust the slider length (8 to 64 characters).
  2. Click Generate Password.
  3. Copy the generated password directly to your clipboard.

UUID & API Key Generator

What It Is: Generates RFC4122 v4 UUIDs and 256-bit API secret keys.

Why It Is Required: Useful for database records, session tokens, and service integration credentials.

  1. Click Generate UUID v4 or Generate API Secret.
  2. Copy the resulting unique string.

6. JWT Tools

JWT Token Decoder

What It Is: Parses and formats JSON Web Tokens into readable JSON blocks without exposing claims to external servers.

Why It Is Required: Allows safe inspection of token claims, expiration dates, and authorization headers.

  1. Paste a raw JWT token string (e.g., eyJhbGciOi...).
  2. Click Decode JWT.
  3. View the formatted Header and Payload JSON blocks.

7. Networking Tools

IPv4 Address Converter

What It Is: Converts dotted-decimal IPv4 addresses into Integer, Binary, and Hexadecimal representations.

Why It Is Required: Essential for firewall configuration and analyzing obfuscated IP addresses used in attacks.

  1. Enter an IPv4 address (e.g., 192.168.1.1).
  2. Click Convert IP.
  3. Read the Decimal Integer, Binary block, and Hex values.

8. Text Utilities

JSON Formatter & Validator

What It Is: Parses, validates, and formats raw JSON strings with proper indentation.

Why It Is Required: Identifies syntax errors in API payloads and makes dense structures human-readable.

  1. Paste your raw JSON string.
  2. Click Format JSON.
  3. Review syntax error positions or the formatted JSON tree output.

9. SOC & Cyber Fraud Ops

SOC IOC Extractor

What It Is: Automated regex parsing engine designed to extract Indicators of Compromise (IOCs) from raw logs.

Why It Is Required: Accelerates SOC incident triage by isolating threat artifacts instantly.

  1. Paste raw server logs or security alert text.
  2. Click Extract IOCs.
  3. Review extracted IP addresses, MD5/SHA256 hashes, and email addresses.

IBAN Format & Checksum Validator

What It Is: Validates International Bank Account Numbers (IBAN) using ISO 7064 MOD-97-10 check-digit algorithms.

Why It Is Required: Used in fraud investigations to verify payee details and prevent transaction errors or wire fraud.

  1. Enter an IBAN string (e.g., GB33 BUXB 2020 1555 5555 55).
  2. Click Validate IBAN.
  3. The engine verifies format rules and mathematical checksum validity.
Scroll to Top