Secvant

Secvant — Browser-based Encryption, Password, and Privacy Tools Secvant is a suite of privacy-first security utilities that run entirely inside your web browser. There are no accounts to create, no software to install, and — during normal tool use — no files or secrets ever leave your device. Open a tool, do the work locally on your own machine, and close the tab. That's the whole product, and that's the whole promise. Most "free online" security tools work by uploading your data to a server you can't see, processing it there, and asking you to trust that it was deleted afterward. Secvant inverts that model. The cryptography, file handling, and analysis all happen client-side using standard, audited browser APIs (the Web Crypto API, Canvas, WebRTC, and friends). Your password, your document, your photo's GPS coordinates — they stay on the device you're holding. Why browser-based, local-first matters When you paste a password into a typical online "strength checker," or drop a sensitive PDF into an online encryption site, you are trusting an invisible backend with your most sensitive data. You're trusting that it uses TLS correctly, that it doesn't log the plaintext, that its employees can't read it, that it isn't breached next week, and that it actually deletes what it claims to delete. That's a lot of trust to extend to a free website. Secvant removes the need for that trust by removing the server from the equation. If the data never travels to us, we cannot log it, leak it, sell it, or lose it in a breach. This is privacy by architecture, not privacy by promise. It's the difference between "we pinky-swear we won't look at your files" and "we built it so we can't." This approach also makes Secvant fast and resilient. There's no upload wait, no queue, no rate limit on your own CPU, and the tools keep working even on flaky connections — because the heavy lifting is your browser, not a distant data center. The toolset Secvant bundles the security tasks people actually need into a single, consistent, no-nonsense interface. Each tool does one job well. Vault — local file encryption. Encrypt and decrypt files directly in the browser using strong, modern cryptography (AES-256-GCM with a key derived from your passphrase via PBKDF2). Drag in a file, set a passphrase, and download an encrypted .vault file you can store anywhere or send through any channel. Only someone with the passphrase can open it. The encryption and decryption happen on your machine — the plaintext never touches a server. It's an ideal way to protect a sensitive document before backing it up to the cloud or emailing it. Pass — password and passphrase generator. Create strong, random passwords and human-friendly passphrases tuned to the length and character requirements you need. Generation uses the browser's cryptographically secure random number generator, so the output is genuinely unpredictable — not the weak Math.random() that some generators rely on. Great for spinning up unique credentials for every account instead of reusing the same password everywhere. Compare — byte-for-byte file comparison. Verify whether two files are truly identical, down to the last byte, without uploading either of them. Useful for confirming a download wasn't corrupted, checking that a "copy" really matches the original, or spotting that two files that look the same are subtly different. Hash — file and text hashing. Compute SHA-256 and SHA-512 hashes for files and text right in the browser. Hashing is the backbone of integrity checking: publish or compare a hash to prove a file hasn't been tampered with, verify a download against a vendor's published checksum, or fingerprint content. Because it runs locally, you can hash large or sensitive files without sending them anywhere. Hide — image steganography. Conceal a secret message or an entire file inside a PNG image using least-significant-bit steganography, with optional encryption layered on top. To anyone else the picture looks completely ordinary, but the hidden payload can be recovered by someone who knows it's there (and holds the passphrase, if you encrypted it). It's a fun and genuinely useful way to move information discreetly — and like everything on Secvant, the embedding and extraction happen entirely in your browser. Usernames — local alias generator. Generate random usernames and aliases on the fly, locally. Helpful when you want a throwaway handle, a pseudonymous identity for a forum, or simply a name that isn't tied to your real one — without a server tracking what you generate. Breach check — password exposure check via k-anonymity. Find out whether a password has appeared in known data breaches without ever sending the password. Secvant uses the k-anonymity model: your password is hashed locally, and only the first five characters of that hash leave the browser to query a breach database. The full password — and even the full hash — never leaves your device, so you get the safety chec