Every checker, quiz, and generator on the site in one place — all private, all free, all run entirely in your browser.
Type any password to see a genuine entropy calculation and an honest estimate of how long brute-force cracking would take — no scare tactics, just math.
Open tool → PasswordsBuild a random-word passphrase strong enough for banking, generated by your browser's own cryptographic random number generator.
Open tool → PasswordsFind out whether a password has appeared in known public data breaches. The whole check runs locally — the password never leaves your device.
Open tool → Account securityA plain-English walkthrough for turning on two-factor authentication across your email, banking, and social accounts, in the order that matters most.
Open tool → New scamUnexpected code texted to you, or a ‘bank’ calling to ask for it? Work out what is actually happening before you respond.
Open tool → LinksPaste a link from an unexpected message and get an instant read on the patterns scammers rely on — before you tap it.
Open tool → QR codesA QR code can hide a malicious URL behind a harmless-looking square. Inspect one here before your camera follows it anywhere.
Open tool → Self-checkTwelve everyday scenarios — public Wi-Fi, strange attachments, urgent login requests — that test whether your instincts match current threats.
Open tool → PrivacyAnswer fourteen questions to estimate how much of your personal life a stranger could piece together from public sources.
Open tool → New scamA step-by-step breakdown of the fake ‘verify you're human’ popups that quietly install malware — see the trick before it sees you.
Open tool → Phone callsRun a suspicious phone call through the red flags of AI voice cloning — the engine behind most ‘family member in trouble’ calls.
Open tool → Scam messagesAI has erased the typos that used to give scam texts away. Learn the new tells with this short, practical quiz.
Open tool → Job scamsFake recruiters — and even deepfake video interviews — are used to harvest your identity or ‘fees’. Check an offer before you celebrate it.
Open tool → Romance scamsAnswer seven questions about the person you have been talking to and get an honest read on whether the relationship is real.
Open tool → New toolGenerate a secret phrase your family can use to prove a panicked phone call is genuinely them — and not a cloned voice.
Open tool → For adults & seniorsTen practical, jargon-free habits that cut your scam risk dramatically, written for adults and seniors.
Open tool → For kidsThree free games — Scam or Safe?, Whack-a-Scam, and Safety Runner — that teach kids to spot online tricks through play.
Open tool →Every tool here runs entirely on your own device — nothing you type is ever sent to a server, logged, or stored. The site is free to use and supported by ads, not by collecting your data.
cyberhygiene.tools was built to help families build good "cyber hygiene" habits — the small, everyday choices that keep you safe online, the same way washing your hands keeps you healthy. Whether you're a parent looking for a safe way to teach your kids about scams, or you want simple advice for an older parent or grandparent, you'll find something useful here.
Desktop, tablet, or phone — every tool and game adapts to your screen.
No email address, no accounts, no passwords to remember — just open and use.
Use the country selector at the top of any page — it changes the scam-reporting contacts and advice to match where you live.
Written in plain language, referencing trusted organisations like Netsafe and CERT NZ.
All the tools here are free, need no account, and run entirely in your browser. Which one you want depends on the situation you are in. The groupings below are the quickest way to find it.
Start with the phishing email checker for an email, the link safety checker for a link in a text or message, or the QR code checker for a printed or on-screen code. If it is a job offer, the job scam checker covers the specific patterns fake recruitment uses. If it is a phone call, the AI voice call checker explains what to do.
The password strength checker tells you where you stand, the passphrase generator gives you something better, the breach checker tells you whether a password has already leaked, and the two-factor setup guide covers the second layer. Doing all four for your email account alone is an afternoon well spent.
The family check word tool is the highest-value thing on this site for families, and it takes five minutes. The Adults and Seniors section is written for sharing with older relatives, and the Kids teaches children through games rather than warnings.
The ClickFix explainer, romance scam checker, one-time code interception guide and AI scam message guide each cover one method in depth.
Go straight to Report a Scam, which lists the right agency for your country and sets out what to do in which order. Contacting your bank is almost always the first step and the most time-sensitive.
A tool that asks you to type a password and then sends it to a server has created a risk that did not exist before. Every tool here is written in JavaScript that runs on your own device, so passwords, links, email text and quiz answers never leave the machine you are sitting at. There is no server-side processing to log, no database to breach, and no account to compromise.
You can verify this yourself. Load any tool page, disconnect from the internet, and the tool keeps working. That is not a claim we are asking you to take on trust.
They are a starting point, not a verdict. A clean result from a link checker means no obvious structural red flags, not a guarantee of safety. A strong password score means the password resists common attacks, not that your account is secure if you have reused it elsewhere. None of these tools scans your device, detects malware, or checks live websites.
The habits matter more than the tools: unique passwords, two-factor authentication, automatic updates, and verifying anything urgent through a channel you chose yourself. The tools exist to make those habits easier to adopt, not to replace them.
No. Every tool runs in your browser and processes what you enter on your own device. Nothing is transmitted, logged or stored, which you can verify by disconnecting from the internet after the page loads.
No. There are no accounts, no sign-ups and no email addresses required anywhere on the site.
If nothing has gone wrong yet, start with the password strength checker and the two-factor setup guide, applied to your email account first. If something has already happened, go straight to the Report a Scam page.
The Kids Zone is designed for them, with games rather than technical tools. The checkers and password tools are written for adults, though older children manage them fine with an adult alongside.
No. None of them scans your device or visits websites. They analyse text you paste, such as a link or an email, using pattern rules running in your browser.