A suite of minimal, audit-friendly, single-file HTML tools for generating, securing, watching, and spending Bitcoin. No installs, no accounts, no telemetry. Pick a tool below: each one opens from your local folder.
Roll a fresh BIP-39 seed from CSPRNG + optional dice/cards/keystroke entropy. Exports plaintext report or AMLT-encrypted .enc.
Encrypted keeper for seed wallets, time-locked redeem scripts, and watch-only public keys. Argon2id at rest. Watch-only export for the online side.
Optional master-passphrase generator for the Vault. Draws words from a 10,000-word pool (BIP-39 + EFF + custom + extras) — wider than the Vault's built-in EFF generator. Strength meter, session pepper, fingerprint checksum, Verify panel. The Vault (v1.65+) accepts a Picker passphrase as a master password directly.
Generate Bitcoin time-locked redeem scripts (P2SH / P2WSH) with SHA-256 checksums. Plaintext .txt backup format, encrypts inside the Vault.
Build and sign PSBTs locally. Loads a watch-only export from the Vault, a snapshot from the Scryer, or a wallet .txt from the Generator. Optional online balance lookup, opt-in with explicit consent. Same file on the build machine and the air-gapped signing machine.
Split a vault into T-of-N Shamir shares so any T of them can rebuild it without the master password — or reassemble shares back into a vault. Three share formats: self-contained Amulet files, SLIP-0039 mnemonics (Trezor-compatible), and secrets.js / iancoleman.io hex.
Last-resort recovery script for vault-native and AMLT-encrypted .enc files. Pure-Python, only depends on cryptography + argon2-cffi.
Watch-only balance viewer. Reads xpub/ypub/zpub or single addresses, queries mempool.space + blockstream.info in rotation. Auto-refresh every 10 min.
Push a signed PSBT or raw transaction hex to the Bitcoin network. Eleven clearnet endpoints + two Tor onions, all editable. Four-step gated confirmation flow, per-row first-confirmation polling, already-broadcast recovery.
Silent Payments wallet — generate a static SP receiving address, scan the chain for matching outputs. Public address can be shared anywhere.