Free OSINT and Privacy Tools
12 free tools for checking your own privacy and doing lawful open-source research. No account, no limits, and most of them run entirely in your browser.
Privacy tools
Test how long a password would take to crack, check it against known breaches, and generate strong passwords and passphrases.
Open tool →PrivacyPhoto Metadata (EXIF) Viewer & RemoverSee the hidden data in a photo, including its GPS location, camera and date, and download a clean copy with all metadata removed.
Open tool →PrivacyWhat Does My Browser Reveal?See what every website learns about you the moment you visit: your IP address, approximate location, network, device and browser fingerprint.
Open tool →PrivacyLink Cleaner: Remove Tracking ParametersStrip utm_, fbclid, gclid and dozens of other tracking parameters from links before you share them.
Open tool →OSINT tools
Check where a username is used across 50 social networks, developer sites and communities.
Open tool →OSINTDNS LookupLook up the A, AAAA, CNAME, MX, NS, TXT, CAA and SOA records of any domain.
Open tool →OSINTSubdomain Finder (Certificate Transparency)Find a domain’s subdomains from public certificate transparency logs.
Open tool →OSINTGoogle Dork BuilderBuild advanced search queries with site:, filetype:, intitle:, inurl:, exact phrases and date ranges, then run them on Google, Bing or DuckDuckGo.
Open tool →OSINTReverse Image SearchSearch for an image on Google Lens, Bing, Yandex and TinEye at once.
Open tool →OSINTUnix Timestamp ConverterConvert Unix timestamps to dates and dates to timestamps, in UTC, your time and Atlantic time.
Open tool →Security tools
Paste an email’s full headers to see its real sender, its delivery path and its SPF, DKIM and DMARC results, with phishing red flags highlighted.
Open tool →SecurityHash Calculator (SHA-1, SHA-256, SHA-512)Calculate SHA-1, SHA-256, SHA-384 and SHA-512 hashes of text or files to prove they have not changed.
Open tool →Questions about the tools
Are these tools free?
Yes. All 12 tools are free, need no account and have no usage limits.
Do you see what I enter?
No. Most tools run entirely in your browser. The DNS lookup asks Cloudflare’s public DNS, the subdomain finder asks crt.sh through our server, and the breach check sends only a partial hash. We do not log what you enter.
Is it legal to use OSINT tools?
Looking up public information such as DNS records, certificate logs and public profiles is generally lawful. How you use the results matters: harassment, stalking and doxxing are illegal. Read the Spy Shop’s guide to legal OSINT on the OSINT Research Hub.
Can I link to or embed a tool?
Yes. Every tool has its own page and address, and there is a ready-made citation and link at the bottom of each page.
Cite or link to Free OSINT and Privacy Tools
Free to share. Please link back.