Link safety checker
Inspect a URL for verified login domains, lookalikes, misleading subdomains, and common phishing patterns without opening it.
Open the link safety checker →Useful without an account
Free security tools that run in your browser
Check suspicious links, test passkeys, generate stronger credentials, build an account plan, and understand email headers without uploading your inputs.
Private by design. Runs entirely in your browser. Nothing you enter here is sent to login.com or anyone else.
Passkey support checker
See whether this browser exposes passkeys, a built-in platform authenticator, and conditional sign-in support.
Open the passkey support checker →Passkey demo
Create and use a throwaway login.com passkey while the page narrates each browser and device step.
Open the passkey demo →Password generator
Generate an unbiased random password or PIN locally, with length presets, character controls, and honest entropy context.
Open the password generator →Passphrase generator
Create a memorable random passphrase from the complete 7,776-word EFF long list, loaded only when requested.
Open the passphrase generator →Account security checklist
Select your services and build a printable checklist with official URLs, exact 2FA paths, passkey status, and recovery links.
Open the account security checklist →Email header analyzer
Parse SPF, DKIM, DMARC, sender mismatches, reply-to changes, and Received hops without uploading message headers.
Open the email header analyzer →A narrow privacy boundary
Tools for decisions, not secret collection
These tools do not ask you to test a real password, enter a verification code, supply a recovery secret, or upload a message. Generated credentials are new random outputs, not measurements of something you already use. The link checker reads the address as text without visiting it. The email analyzer parses the headers you paste locally. Passkey exercises use the browser’s standard credential interface without creating a login.com account.
Results are deliberately calibrated. A link with no detected warning signs is not guaranteed safe. An email authentication pass does not prove the message is benevolent. A positive passkey test does not promise that every provider enables the feature. Use each result with the related guide and the verified official route.