Security4

Password Vault

Manage passwords encrypted: Web Crypto API, AES-256-GCM, and PBKDF2, with encryption in your browser. The encrypted vault is kept in your account so you have it on every device; your master password and your keys are never sent to us. Import from LastPass, Bitwarden, KeePass, restore backups. Security audit, password generator, auto-lock.

Email Alias

Werkzeu.ge does not forward any mail: the tool suggests alias names and shows the steps for Gmail plus addresses, Apple Hide My Email, Proton Pass or SimpleLogin and your own domain. With a list of which alias you use where.

Email Encryption

Encrypt, decrypt and sign messages with RSA-OAEP, AES-256-GCM and RSA-PSS, entirely in your browser. Werkzeu.ge format, not OpenPGP or S/MIME: Thunderbird or Outlook cannot read it, both sides need Werkzeu.ge.

Password Expiry Calendar

Plan your account check at the interval you choose and get calendar reminders. ICS export for Apple Calendar, Google, Outlook, hand-off to the deadline tracker, categories and check tips.