Free Productivity Tools
Three sharp tools to help you work smarter — generate and analyze passwords, check known breach exposure, extract text from images, and count every word and character in your writing.
⚡ Productivity Tools 3 tools
What makes a strong password?
A strong password combines length with unpredictability. The Password Generator uses a cryptographically random algorithm to ensure no two generated passwords are alike.
A 16-character password is exponentially harder to crack than an 8-character one, even with simple characters.
Combining uppercase, lowercase, numbers, and symbols dramatically increases the number of possible combinations.
Random passwords are far stronger than memorable ones. Use a password manager to store them securely.
Never reuse passwords across sites. If one account is breached, unique passwords protect all others.
Common character limit reference
Use the Word & Character Counter to check your text against platform limits before publishing:
| Platform / Context | Limit |
|---|---|
| X (Twitter) post | 280 characters |
| LinkedIn post | 3,000 characters |
| Instagram caption | 2,200 characters |
| Google meta description | ~155–160 characters |
| Email subject line (best practice) | ~50 characters |
| YouTube video title | 100 characters |
| SMS message | 160 characters |
Why these tools are built with privacy in mind
Password generation and analytics run in your browser using the Web Crypto API. Generated passwords and passwords entered for analysis are not transmitted, logged, or stored. If you select Check for breach, only the first five characters of a locally created SHA-1 fingerprint are sent to the Pwned Passwords range API. Anonymous range replies are cached on your device for up to 24 hours, with a maximum of 100 entries.
Similarly, the Word & Character Counter analyzes text locally with Rust/WebAssembly in a Web Worker and uses a complete JavaScript fallback if WebAssembly is unavailable. Draft text is not sent to a MonkeyTactics analysis server. Optional autosave uses browser-managed IndexedDB storage, so users should still consider the security of their device, browser profile, extensions, and applicable document-handling policies.
The OCR Utility also processes selected images and document pages locally. HEIC and HEIF images are converted in the browser, PDF.js renders PDF pages locally, and Tesseract.js recognizes the prepared text regions. Uploaded files, screenshots, camera captures, scans, and extracted text are not sent to a MonkeyTactics application server.
Frequently Asked Questions
-
Are the generated passwords truly random?
Yes — the Password Generator uses the browser's built-in Web Crypto API (
crypto.getRandomValues()), which provides cryptographically secure randomness. This is the same standard used in professional security applications. -
What is the maximum password length supported?
The Password Generator supports passwords up to 2,048 characters. For most use cases, 16–32 characters provides an excellent balance of security and usability.
-
Does the word counter count hyphenated words as one or two?
The counter follows the browser's locale-aware Unicode word boundaries. In English, a form such as "well-known" is typically counted as two word-like segments. Different editors and publishing systems may apply their own counting conventions.
-
Can I use the word counter for text in other languages?
Yes — the counter supports Unicode text, including accented characters, non-Latin scripts, and emoji. Modern browsers use locale-aware segmentation for languages such as Chinese, Japanese, and Thai, with a Unicode-aware compatibility method when that API is unavailable. Ambiguous language-specific boundaries can still differ from another editor's rules.