// Mission
// tl;dr โ Cryptographic proof instead of marketing promises. Open DevTools and verify zero transmission during generation. That is the entire mission.Secure Key Generator was built to address a specific gap: most password generator tools make privacy claims that cannot be independently verified. This tool makes a claim โ zero transmission โ and provides the means to verify it in the browser DevTools in under 30 seconds. No trust required.
The research on this site is written for users whose security and privacy matters beyond the ordinary: journalists protecting sources, activists in hostile environments, human rights workers, security researchers, and anyone who needs to know โ not merely believe โ that their credential generation is private.
// About the Author
AY Tanoli is a hobbyist security researcher and online investigator who spends time studying password security, authentication protocols, and digital privacy practices. This site is a collection of that research โ written in plain language for anyone who wants to understand credential security without the jargon. Keen on educating and helping others make sense of online security.
The research here focuses on the gap between security promises and verifiable security properties โ a distinction that matters acutely when the consequences of a wrong assumption can include source compromise, prosecution, or physical danger.
// Areas of expertise
- Password security and authentication research
- Zero-knowledge cryptographic principles and verification
- Passphrase security and credential management
- Online privacy and security best practices
- Browser security, fingerprinting, and metadata minimisation
- NCSC, EFF Surveillance Self-Defence, and Freedom of the Press Foundation guidance
// Verification First
Verifiable in DevTools Network tab. Not a claim โ a proof available to every visitor.
crypto.getRandomValues() exclusively โ W3C Web Cryptography API backed by OS hardware entropy.
Tested on Tor Browser at Standard and Safer security levels. No canvas fingerprinting.
Zero tracking scripts. Zero fingerprinting. Zero telemetry. Verifiable in source.
// Editorial Standards
All security claims are sourced from primary documents: EFF Surveillance Self-Defence, Freedom of the Press Foundation, NCSC Password Guidance, NIST SP 800-63B, and W3C Web Cryptography API specification.
Where claims relate to specific threat models โ journalists, activists, high-risk users โ they are verified against documented security training materials used in those contexts, not derived from consumer security marketing.
// Organisation Details
Operated by: Kokal Operations Ltd, registered in England and Wales
Website: securekeygenerator.com
Founded: 2026
Contact: hello@securekeygenerator.com
Security: security@securekeygenerator.com
Privacy: Privacy Policy (UK GDPR compliant)