• 

  I've created 21 tools, all arranged in a vertical grid

• 

  Educative information for users

• 

  Educative information for users

• 

• 

• 

• 

• 

  The tools can be collapsed or expanded, dragged and rearranged. This will persist for the live of the browser session

• 

  The tools can be collapsed or expanded, dragged and rearranged. This will persist for the live of the browser session

• 

  I've created 21 tools, all arranged in a vertical grid

• 

🔐 PrivSecrets: Privacy Tools Built for Devs, Sysadmins & Security Pros

🔍 Try It Out

🔗 PrivSecrets.com — No login. No tracking. 100% client-side processing.

💡 Inspiration

I honestly surprised myself with what I was able to build in just about 10 days.

What started as a simple idea quickly evolved into something much bigger — a full-featured privacy toolkit that runs entirely in the browser, with over 21 powerful tools working seamlessly together.

This project reminded me how far you can go with a bit of curiosity, focused evenings, and the right AI tools by your side. It’s been fun, challenging, and deeply rewarding.

PrivSecrets is proof that you don’t need a massive team to ship something meaningful — just a clear vision and the right tools to help bring it to life.

⚡ What it Does

PrivSecrets is a comprehensive collection of 21+ privacy and security tools that run 100% client-side in your browser. All processing happens locally — your data never leaves your device unless you explicitly choose to share it, and even then, it's always encrypted first.

🔒 Encryption & Security Tools

• Password Generator - Create ultra-strong passwords with military-grade randomness
• Diceware Generator - Generate memorable passphrases using the Diceware method
• Secure Encrypted Note/Code - Create private notes/code snippets with end-to-end encryption and burn-after-reading
• PGP Key Generator - Create PGP/GPG key pairs for encryption and signing
• SSH Key Generator - Generate secure SSH keys for authentication
• File Encryption Tool - Encrypt/decrypt files with AES-256
• Secret Splitter - Split secrets using Shamir's Secret Sharing algorithm
• Secure Clipboard Manager - Safely handle, inspect, and sanitize clipboard content

👨‍💻 Developer Tools

• Self-Signed Certificate Generator - Create certificates for local development and testing
• SRI Hash Generator - Generate integrity hashes for third-party JS/CSS resources
• YAML ⇄ JSON Converter - Convert between YAML and JSON formats with ease
• JWT Decoder & Verifier - Inspect and verify JWT tokens securely

🕵️ Privacy & Analysis Tools

• QR Code Tools - Generate and decrypt QR codes securely
• Breach Check - Check if your data has been compromised in known breaches
• URL Inspector Tool - Analyze and decode URLs to detect suspicious patterns
• Metadata Scrubber - Remove EXIF data from images and metadata from PDFs
• Image Steganography Tool - Hide secrets within images

🔄 Data Transformation Tools

• Data Encoder/Decoder - Transform data with various encoding schemes
• File Hashing Tool - Generate and verify file hashes for integrity checking
• Random Data Generator - Create cryptographically secure random data
• Document Converter - Convert DOCX and TXT documents to HTML format securely

All tools feature a vibrant, draggable UI that remembers your layout preferences, and everything is wrapped in a clean, intuitive interface.

👥 Who It's For

PrivSecrets was built with developers, sysadmins, and security-conscious users in mind — but it’s just as useful for:

• 🔧 MSPs and IT support teams — for sharing credentials securely, verifying file integrity, and managing encrypted notes
• 🖥️ Helpdesk staff — for generating passwords, checking breaches, or quickly decoding JWTs and URLs
• 🧪 DevOps & QA — for local testing with self-signed certs, secure file transfers, and SRI hash generation

If your job involves handling sensitive data, troubleshooting, or working in secure environments, PrivSecrets can make your day easier — all without leaking a single byte to a server.

⚙️ Built & Powered With

The entire PrivSecrets platform was built using AI — directly in the browser, inside Bolt.new. No local setup, no external code editor — just prompts, ideas, and real-time builds.

🧠 Driven by Prompt Engineering

Every feature, tool, and interface element was created by guiding Bolt.new, StackBlitz's AI-powered development agent, using carefully crafted prompts and iterations.

🛠️ Bolt.new — The Real Engine

Bolt.new handled the full-stack development using:

• React + TypeScript — modular, fast frontend
• Tailwind CSS — clean, utility-first styling
• Vite — blazing-fast build system
• Web Crypto API — local encryption and secure randomness
• Supabase — used only for non-sensitive metadata storage
• AI Assistants — ChatGPT and Claude were used to help shape ideas, refine UX copy, and test functionality

All the tools, encryption logic, and layout systems were generated and refined via AI, letting us stay focused on usability and privacy instead of getting lost in setup and boilerplate.

🚧 Challenges We Ran Into

• Client-Side Limitations: Keeping everything 100% client-side while still adding robust features
• UX Complexity: Making complex tools (like PGP keygen or file hashing) user-friendly
• Visual Design Balance: Creating a cohesive design system with 21+ distinct tools
• Scope Management: Avoiding feature creep while ensuring comprehensive functionality
• Cross-Browser Cryptography: Ensuring consistent behavior of Web Crypto API across browsers

🏆 Accomplishments We're Proud Of

• 21+ fully working tools with consistent design and behavior
• Zero tracking, zero ads, zero telemetry - complete privacy by design
• Drag-and-drop UI with persistent layout and collapsible tools
• End-to-end encryption for all sensitive data
• Vibrant color themes with unique visual identity for each tool
• Responsive design that works on mobile and desktop
• Comprehensive help system with detailed explanations and examples

📚 What We Learned

• Strong privacy doesn't have to mean a bad user experience
• The Web Crypto API is powerful but requires careful implementation
• Testing crypto tools across browsers requires thorough validation
• The more seamless the tool, the more likely people are to use it
• AI-assisted development can dramatically accelerate complex projects

🚀 What's Next for PrivSecrets

• New Tools: Add more specialized security tools (API key masker, PDF sanitizer, etc.)
• Send a secure note/code via email: Send to email from within Secure Encrypted Note/Code tool
• Optional Sync: Implement zero-knowledge encrypted sync for settings and preferences
• Accessibility Improvements: Enhance keyboard navigation and screen reader support
• Progressive Web App: Enable offline functionality and home screen installation
• Browser Extensions: Create browser extensions for quick access to tools
• Mobile Optimization: Further improve the mobile experience for all tools
• Community Contributions: Open source selected components for community enhancement

🌍 Why We’re Submitting for the Hackathon

🛰️ Deploy Challenge

PrivSecrets is a fully client-side, privacy-first toolkit built with Bolt.new. To share it securely and scalably with the world, we’ve deployed it on Netlify — which offers a perfect match for the app’s goals: global CDN delivery, zero-config deployment, HTTPS out of the box, and blazing-fast performance.

Using Netlify allowed us to:

• Instantly deploy a secure, production-grade version of PrivSecrets
• Maintain privacy guarantees by serving a static, client-side app with no backend dependency
• Leverage Netlify’s smooth CI/CD pipeline to continuously update as new tools are added

🚀 Startup Challenge

Even though PrivSecrets is a local-first, client-side app, it still needs secure, scalable infrastructure for things like analytics-free metadata storage, encrypted usage counters, and future features like optional sync and sharing.

That’s why we used Supabase — it provides the perfect balance of developer-friendly DX and startup-grade scalability. Specifically:

• Supabase acts as a secure storage layer for non-sensitive metadata, keeping encryption keys and private content strictly client-side
• It supports features like row-level security, which align perfectly with PrivSecrets’ privacy ethos
• It gives the project a solid backend foundation to scale to millions without compromising trust or privacy

---

Built with ❤️ using Bolt.new’s AI-assisted development. All processing happens in your browser, keeping your data private and secure.

Built With

• ai-assistants-like-chatgpt-and-claude-played-a-vital-role-in-shaping-ideas
• and
• and-tailwind-css-for-clean
• copywriting
• cryptojs
• eslint-(code-linting/formatting)-ai-assistants:-chatgpt-and-claude-(for-ideation
• fast-frontend
• javascript-frameworks/libraries:-react-18
• js-yaml
• jwt-decode-build-tools:-vite-platforms:-bolt.new-(ai-powered-development-environment)
• keeping-all-private-data-in-the-user?s-browser.-throughout-the-process
• languages:-typescript
• leveraging-react-and-typescript-for-a-modular
• lucide-react
• mammoth
• netlify-(hosting-and-continuous-deployment)-cloud-services:-supabase-(backend-as-a-service)
• netlify-databases:-postgresql-(via-supabase)
• qrcode
• react-router
• refining-ux-copy
• tailwind-css
• turndownservice
• utility-first-styling.-the-blazing-fast-vite-build-system-ensured-rapid-development-cycles
• while-the-web-crypto-api-provided-secure-local-encryption-and-true-randomness.-supabase-was-integrated-strictly-for-non-sensitive-metadata-storage
• with-row-level-security-for-access-control-apis:-web-crypto-api-(browser-native-cryptography)-other-technologies:-shamir?s-secret-sharing-(algorithm)