dc=tools
Folded lines are joined and base64 values decoded as text, SIDs, GUIDs or security descriptors. The password builder writes the quoted UTF-16LE value AD expects. Everything runs in your browser, so nothing you paste leaves your machine. The page's Content-Security-Policy also stops it from sending anything, which you can check in its source.
Paste lines from ldifde or ldapsearch. Folded lines are joined, and every base64 value (attr::) is decoded as text, or as a SID, GUID or security descriptor when it is one.
Importing this LDIF sets the account's password straight away. Check the DN before you run it.
The value is the password in double quotes, encoded as UTF-16LE, then base64. AD only accepts it over an encrypted connection: ldapmodify -H ldaps://…, or ldifde -i -h -f pwd.ldf, where -h turns on Kerberos encryption. What you type stays in this page, but use a temporary password if you'd rather not paste a real one anywhere.