Portal privacy-tools.bluesky-labs.com
Secure Crypt Lab v1.0
Local Processing Verified: Your files and inputs never leave your device. Processed 100% client-side.

Secure & Serverless
Privacy & Encryption Sandbox

Local-first privacy tools. Files are processed client-side where supported. Review results before sharing sensitive data.

Photo Inspector

Drag & drop an image, or browse

Supports JPEG, JPG and PNG. Redraws locally to erase all hidden parameters.

Related Utilities

Secure Image Compressor

Technical Security Analysis of Local Secure & Serverless Privacy & Encryption Sandbox & Web Cryptography

Securing sensitive data requires robust client-side sanitization. Modern browsers provide the window.crypto API, enabling cryptographically secure pseudo-random number generation (CSPRNG) and hardware-accelerated encryption via Web Crypto standards. When you encrypt text or files, PBKDF2 derives key bytes from your passcode, and AES-256 GCM encrypts the payload, ensuring data integrity without sending keys to a backend server. Similarly, PII risk scanners use regex-matching queues to detect pattern structures like emails or credit cards, and mask them in-tab. Running security checks inside the client sandbox prevents telemetry leaks, protecting proprietary credentials, API logs, and customer database drafts from external interception.

Specifically, this Secure & Serverless Privacy & Encryption Sandbox utility is designed to free browser-native privacy suite. strip image exif metadata, encrypt files and texts locally using aes-256 gcm, and scan or generate qr codes securely. It runs with zero server dependencies, ensuring complete security and zero latency.

How to Use

  1. Input your raw logs, JSON objects, files, or sensitive text strings into the secure local container.
  2. Define your parameters (e.g. choose PII masking levels, or input an encryption passcode for AES-256 GCM).
  3. The client-side cryptography engine processes the data instantly without sending packets over the network.
  4. Copy the sanitized text or download the encrypted secure bundle directly from your local browser tab.

Common Use Cases

PII-Sanitized LLM Prompting Find and mask sensitive names, API keys, or email addresses in log files before pasting them into external AI chats.
Passcode-Protected File Encryption Encrypt configuration files or confidential text blocks using AES-256 locally before sharing them via insecure channels.
Decoupled JWT Claims Verification Decode JSON Web Tokens in-browser to verify authorization claims without sending auth keys to online web decoders.

Frequently Asked Questions

How can I be sure my sensitive logs are not sent to any servers?

The page runs serverless on edge infrastructure, utilizing local JavaScript loops. Network inspect tools prove zero packets are sent during processing.

Is the AES-256 file encryption cryptographically secure?

Yes. It uses the standard Web Crypto API with Galois/Counter Mode (GCM), providing both confidentiality and integrity authentication.

What categories of PII can the scanner detect?

The local engine scans for emails, phone numbers, API keys, credit cards, social security numbers, and common database logs.

Can the local JWT decoder modify token contents?

No, it parses and decodes the Base64URL-encoded JSON structures locally to show claims without validating signatures against an external server.