Security at InspireTools starts with not holding your data in the first place.

Local processing

Tools process files and text in your browser. Because your content is not uploaded, it cannot be intercepted in transit, stored on our servers or exposed in a breach of our systems.

How the site is protected

Encrypted connections. The site is served over HTTPS.
Content Security Policy. The browser is instructed to run only scripts that come from this site, which limits the damage a malicious file or injected content could do.
No third-party scripts. There is no advertising, analytics or widget code from other companies running on the page.
Careful file handling. Files are identified by their contents rather than their names. Archives are checked for unsafe paths and for "zip bombs" before anything is extracted. Documents are displayed as text and never executed.
Strong randomness. Passwords, keys and tokens are generated with your browser's cryptographically secure random number generator, and are never stored or sent anywhere.
Standard cryptography. Encryption tools use well-established algorithms (AES-256, PBKDF2, SHA-2) through the browser's built-in Web Crypto API rather than home-made code.

What we cannot protect you from

Malware or browser extensions on your own device that can read what you do.
Files that are themselves harmful. Extracting or inspecting a file here does not make it safe to open.
Forgotten passwords. Files you encrypt cannot be recovered without the password, by you or by us.

Reporting a vulnerability

If you believe you have found a security problem, please tell us through the contact page with enough detail to reproduce it. Please give us reasonable time to fix it before disclosing it publicly, and do not access other people's data or disrupt the service while testing. We appreciate responsible reports and will acknowledge them.