Every tool on this page is free to use on this site (Release Check is free for one file at a time, with a paid version for more). None needs an account, and each one runs on your own phone or computer, so what you type or open is not uploaded. Load one, turn the internet off, and it keeps working. The packs on the pricing page are folders to keep, with guides, rules and records.
Our guiding principle: our checks fit the action gap. The four habits the National Cybersecurity Alliance asks everyone to keep (use a password manager, turn on multifactor authentication, keep software updated, and question every unexpected message) are advice. UtilForge’s tools are the moment of decision, which is where the 2026 Oh, Behave! report shows people fall short: in its survey of 5,000 adults in the United States, United Kingdom, India, Brazil and Singapore, 81 per cent of United States adults said staying secure online is a priority, and half of everyone surveyed had been a victim of cybercrime. The report’s finding is a gap between knowing and doing, and it shows in the moment a message arrives, a payment is due or a file is about to be pasted. That moment is where every UtilForge tool is built to help.
Festive season, 31 October to 6 February. Four new checks for the busiest weeks online: a delivery text check, a shop check, a gift card request check and a first-hour guide for anyone who has already paid. See the dates and the festive checks.
Start here: what is happening?
SOMETHING ARRIVEDA message, call, link or offerA text, email, job offer, payment request or a page telling you to paste something.PROTECT YOURSELFYour family, accounts and detailsA family safe word, what not to tell artificial intelligence, and taking your details off the internet.SOMETHING TO SHAREA document, PDF file or photoBlack out names, take hidden details out of files and photos, and check before you send.
Also here: everyday calculators and tools for people who run a website.
Check a message, a website or an offer
- Is this a scam text message? Paste it and check. Paste a text, email or WhatsApp message and see which common scam signs it shows, with what to do next. Read on your device only.
- Is this delivery text real? Parcel and toll text check. Paste a parcel, delivery or toll text and see whether its link belongs to the courier it names, with fee requests, deadlines and disguised links explained.
- Is this shop real? Check a shop before you pay. Paste a shop’s web address, and its contact or returns page if you like, and see copied brand names, missing details and risky ways to pay.
- Is this AI app or extension safe? New. Answer a few questions about what you want an artificial intelligence app to do, then paste an app’s or browser extension’s description, permissions or advert to see its warning signs, such as installs from outside the app stores, requests for your password, or access to every website you visit.
- Do I need a VPN? Is this VPN safe? VPN check. Answer a few questions to see what a virtual private network (VPN) would and would not do for you, then paste a VPN app’s description, advert or permissions to see its warning signs.
- Is this advert a scam? Advert check. Paste the words of a search, Facebook, Instagram or WhatsApp advert and tick what you can see, such as a celebrity, a countdown or a postage-only payment, to find common warning signs and what to do instead.
- Is this the official government site? Web address check. Paste a web address, a search result or an advert and see the part of the address that decides where it goes, and whether it ends in a government ending such as .gov, .gov.uk or gov.za.
- Who sent this email? Email sender check. Paste the sender line of an email and see whether the address belongs to the company the email names, with look-alike addresses, free accounts and reply-to tricks explained.
- Before you send money: a ten-question check for transfers. New. Ten yes-or-no questions for the moment before a bank transfer or payment-app payment, including whether someone is on the phone with you.
- Hide Log Details: hide usernames, computer names and addresses in a log. New. Swaps real names and addresses in a pasted log for numbered labels before you share it.
- AI Use Rules for Your Team: a one-page policy for what not to paste. New. Make a one-page set of rules for how your team uses artificial intelligence tools, with what never to paste, who to ask, and a review date.
- Where to Report a Scam: your country and the first steps. New. Choose your country and what happened, and see the first steps in order and the official places to report.
- Security Check Reminders: a calendar file that returns every three months. New. A list of security habits for you or your team, inside a reminder that repeats every three months.
- Question for Your Host: ask your web host the right questions after a website flaw. New. Writes the message to send to your hosting company or web developer.
- Domain Email Check: could someone send invoices as your business?. New. Type a business email domain and see, from public records, whether others can send email in its name.
- Trusted People Card and lock-screen reminder. New. Name up to five people who can help if your phone is stolen, print a wallet card and download a lock-screen picture.
- Asked to pay with gift cards? Gift card scam check. Paste a message and see whether it asks you to pay, verify or settle a bill with gift cards, read out codes or send a photo of a card.
- Already paid a scammer? The first hour, by country. Choose your country and how you paid, and get the steps in order: who to call first, how to lock your accounts and where to report.
- How to check if a website is legit before you pay: a payment page check. About to pay for a quiz, a game, a dating app, a course or a free trial, or got a message asking you to pay a fee or tap a link? Check it first.
- Fake job scam check: look at a recruiter’s message before you reply. Check a message from a recruiter against the warning signs United Kingdom, United States and South African agencies describe, and see what to do if you already paid or sent documents.
- Investment scam check: test an offer for warning signs. About to invest, trade, buy crypto or take a loan? Check the offer for the traps regulators warn about, and find your country’s official register.
- Online course scam check: test a course or side-hustle advert. Selling you a course, coaching or a trading academy? Check the pitch for the warning signs consumer regulators describe, and see how to ask for a refund.
- Fake “verify you are human” check: before you paste a command. A page tells you to press keys and paste something to prove you are human? Check the writing or command for warning signs first. It never runs what you paste.
- Loan calculator: can I afford this loan or card? See the total cost. Before a loan, a credit card, buy now pay later or a big purchase: see what it really costs, what one missed payment does, how long a card takes to pay off.
Protect your family and your accounts
- Family Safe Word: make and print a card. Make a safe word only your family knows, and print the card. Use it to check who is calling before anyone sends money or shares a code.
- Set up a phone for an older relative: a checklist to do together. A printable checklist for call and text screening, saved cards, two-step login, a family safe word and who to call for help. Nothing is stored.
- Password habits check: six questions. Six yes or no questions about how you use passwords, set against National Cybersecurity Alliance guidance. You type no password, and nothing leaves your device.
- Flooded with sign-up emails? Find the one that matters. Get ready-made searches for Gmail, Outlook.com, Apple Mail and Yahoo Mail to find the one real order, payment or password email hidden in a flood of sign-ups. It never connects to your email.
- Find every subscription you pay for. List what you pay for, or check your own statement on your own phone with the internet off: find every repeat payment, see the yearly total and spot overlaps.
- Cancel a subscription and keep proof. Write the message that cancels a subscription, keep proof that you did, and if you were charged again, write the message that asks your card provider to.
Keep your personal details private
- Prompt injection checker: find hidden instructions before you give text to an artificial intelligence. Paste text from a web page, email or document and find instructions aimed at ChatGPT, Gemini, Claude or any artificial intelligence, including hidden characters, white text and coded messages.
- Invisible character remover: find hidden text and zero-width spaces. See and remove invisible characters, hidden tag-character messages, direction tricks, look-alike letters and tracking codes in links, then copy a clean version.
- Artificial intelligence privacy: hide names and personal details before you ask. Use any artificial intelligence on a message about real people without handing over their details. Swap names and numbers for labels, ask the artificial intelligence, then put the real details back.
- What not to paste into artificial intelligence: the list and a check. The list of what never to paste into any artificial intelligence, from passwords to health details and staff records, and a free check that points them out.
- Remove your personal information from people-search sites. Ask the companies that publish or sell your details to show you what they hold, or to delete it.
- Car data privacy: who has my driving data? Write a request letter. Write a letter asking a car maker, data broker or insurer what driving data it holds, to stop sharing it or to delete it, under the law where you live. You send it yourself.
- Photo metadata remover: take the location and hidden details out of photos. See and remove the location, camera and date stored inside photos before you share them. The picture quality stays the same.
Documents, PDF files and photos
- Redact PDF free: black out text in a PDF so it cannot be copied. Black out names, numbers and other details in a PDF file, then check the result. It runs in your browser, and your file is not transmitted.
- Check if a PDF redaction worked: is it really blacked out? Check a blacked-out PDF file to see whether the words underneath can still be read, plus other leaks in the file. The file stays on your device.
- Release Check: find what is hiding in a document. Before you send or publish a PDF, Word, Excel or PowerPoint file (including one exported from Apple or Google apps), find words still readable under black boxes, hidden sheets, tracked changes and comments. Free for one file at a time; the full version is paid.
- Remove metadata from a PDF file: see and remove the author and hidden details. See the author, program, dates, comments, attachments and photo locations stored inside a PDF (Portable Document Format) file, then remove them. It runs in your browser, and your file is not uploaded.
- Compress PDF file without uploading it. Make a PDF (Portable Document Format) file smaller in your browser. Choose Strong, Balanced or Light, or aim for a size in kilobytes. The file stays on your device. Free.
- Merge PDF files without uploading them. Join several PDF (Portable Document Format) files into one, in the order you choose, inside your browser. Nothing is uploaded.
- Split PDF, rotate, reorder or delete pages, without uploading. Split a PDF file, rotate pages, change their order, delete pages or pull pages out, with page previews, inside your browser.
- PDF to Word: copy the text into a Word document. Turn the text of a PDF file into an editable Word document in your browser. Text only, with an honest note about what is left out. Nothing is uploaded.
- PDF to JPG or PNG: turn PDF pages into pictures, without uploading. Turn each page of a PDF file into a JPG or PNG picture, choosing the pages and the sharpness. Nothing is uploaded.
- JPG to PDF: turn pictures into a PDF file, without uploading. Put JPG, PNG or WebP pictures into one PDF file in your order. The location stored in photos is taken out first.
- Sign a PDF: fill it in and add your signature, without uploading. Add text, today's date, ticks and your drawn signature to a PDF form or letter, inside your browser. Nothing is uploaded.
- Turn iPhone photos into JPG pictures (HEIC to JPG), without uploading. Turn iPhone High Efficiency Image Container photos into Joint Photographic Experts Group files, many at once. Hidden location and camera details are removed. Your photos stay on your device.
Everyday calculators and helpers
- Value-Added Tax Calculator: add or remove value-added tax. Add value-added tax to a price or take it out, with 2026 rates for seven countries or your own rate, for one amount or a whole invoice. An estimate, not tax advice.
- Bill Splitter and Tip Calculator. Split a restaurant bill equally or by dish. Enter tax as an amount or a percentage, pick a tip, share the leftover pennies fairly and copy a link to the split.
- Final Grade Calculator: the score you need. Work out the score you need on your final exam to reach the grade you want, with what-if scores and weighted categories from your syllabus.
- Overtime Pay Calculator: a week of overtime. Estimate a week of overtime pay under the United States federal 40-hour rule at 1.5 times pay, with a California daily overtime option. An estimate, not legal advice.
- Sort my saved-for-later reading. Paste or open your newsletters, saved emails, bookmarks and notes, and sort them into one document by topic.
For people who run a website
- Robots.txt Generator: write and check the file. Write and check a robots.txt file, the note that tells crawlers which pages they may visit, including artificial intelligence crawler choices. Nothing is uploaded.
- LLMs.txt Generator: a map of your site for artificial intelligence. Write an llms.txt file, a short list of a website's best pages for artificial intelligence assistants, on your own device. Nothing is uploaded and it starts straight away.
- Artificial Intelligence Access Check: which artificial intelligence crawlers get in. Paste your robots.txt to see which artificial intelligence crawlers it lets in and which it blocks: crawlers that quote you and crawlers that train. Nothing is uploaded.
- Schema markup generator (JavaScript Object Notation for Linked Data, JSON-LD): 22 types, with a checker. Build JavaScript Object Notation for Linked Data, the labelled data that tells search engines what a page is. 22 types. Copy it, save it and check it. Nothing is uploaded.
- Web Content Accessibility Guidelines Contrast Checker. Check whether text and background colours pass Web Content Accessibility Guidelines 2.2 AA and AAA, and get the nearest colour that passes. It runs on your device.