FastPwd runs on fastpwd.com. It is a free local encryption toolkit, not a password manager. The online password generator, password strength checker, UTM stripper, Burn-Link, and file encryption are pages you can open and use: computation uses the browser Web Crypto API with AES-256-GCM. There are no accounts, and we do not store your passwords.
01
A set of encryption and privacy tools that stay in the current tab. Random passwords, passwords you audit, text you clean, and files up to 5 GB do not leave this device as business data by default. Burn-Link is the only feature that sends content; the server receives ciphertext only.
02
Not a password manager, not a cloud drive, and not a security suite that makes you register first. Treating FastPwd as “a service that stores your secrets” is the wrong use: we deliberately keep no vault, so the server has no plaintext file of yours.
Generate passwords, check whether an old one is strong enough, strip UTM from a link, send a colleague an API key once, encrypt a backup—these can finish in the browser. Hand the plaintext to yet another backend and you add one more party you must trust.
FastPwd keeps sensitive computation in the current tab. After you close the page, that input is not kept as FastPwd business data, because it never reached the server. The one exception is explicit: Burn-Link stores ciphertext only; the decryption key sits after the # in the address bar and never enters the HTTP request.
Any site can print a slogan. FastPwd only promises what you can see on the spot: where computation happens, what is not uploaded, and whether you must register first.
Password generation, Password Audit, privacy cleaning, and file encrypt/decrypt all run in the browser. Plaintext, keys, and files are not uploaded by default and are not written to analytics.
None of the five tools sits behind a login gate. A recipient who opens a Burn-Link with a complete # fragment also does not need an account first.
Strength ratings, weak-password hits, the Clean Link strip list, before/after redaction, and Burn-Link burned state all stay on this device. To verify traffic, follow the blog steps and open DevTools Network.
You do not need to register first. Developers, support teams, and anyone sending a backup can open the matching page and finish the job.
Draw a 6–128 character random password locally, or send an API key to a colleague with Burn-Link. Results do not have to land in a cloud vault first.
Password generator ↗Strip UTM, fbclid, and gclid before you send a link, then mask phone numbers, emails, and ID numbers. Links and source text are not handed to another backend by default.
Privacy cleaner ↗Check whether an old password is strong enough, encrypt a file up to 5 GB on this device, or send a link that burns after one open. No signup at any step.
File Encryption Box ↗Trust comes from boundaries you can check. The following are not part of what FastPwd offers.
FastPwd does not take questions or send notices by email. Policy changes go on the Privacy Policy and Terms of Service, with an updated revision date. There are no accounts, so there is no inbox for contact.
Use the tools as the current page provides them. This site does not promise response times, incident windows, or any SLA, and it does not promise compensation for indirect loss.
Generated passwords, passwords you audit, and encrypted files stay in your browser. Burn-Link stores ciphertext only; if a key is lost or a passphrase forgotten, FastPwd has no recovery path.
Password Audit checks a public weak-password list shipped with the page. It can catch common weak passwords, but it is not a Have I Been Pwned-style full-web lookup.
No email required first. Generate a set of random passwords locally, or encrypt a file up to 5 GB in the current tab.