Focused tools with practical guidance

Privacy-friendly developer tools for safer everyday workflows.

Fast browser utilities for JSON, Base64, JWT, Regex, Hash, URL encoding, timestamps, text diff, Markdown preview, and strong passwords — paired with examples, caveats, and local-first guidance.

12 focused tools16 concept guides0 signup stepsLocal-first processing notes

Local workspace

Your tools stay one click away

Open and save core tools to build a small local workspace. Favorites and recent tools are stored only in this browser.

Manage workspace

Featured tools

Each featured page includes examples, caveats, and data-handling notes.

Inspect

Debug API payloads

Format JSON, decode Base64, inspect JWT claims, and convert timestamps without losing the security context.

Open workflow →
Validate

Prepare safe strings

Encode URL components, test regular expressions, and generate hashes with visible edge-case notes.

Open workflow →
Protect

Create strong credentials

Generate high-entropy passwords with clear reminders about managers, reuse, and shared devices.

Open workflow →

Guides

Concepts before copy-paste

Practical articles explain what the tools can do, what they cannot prove, and how to avoid common developer mistakes.

View all guides
7 min read

Base64 is not encryption

A practical guide explaining what Base64 encoding does, why it is reversible, where it is useful, and why it should not be used to protect secrets.

8 min read

JWT decode vs verify

A developer guide to decoding JWT header and payload fields, verifying signatures, reading exp and iat claims, and avoiding common token mistakes.

8 min read

URL encoding for query parameters

Learn when to encode a query parameter, how percent encoding works, why double encoding breaks links, and how to debug malformed escape sequences.

9 min read

Hashing vs encryption

A practical comparison of hashing, encryption, checksums, password hashing, and when SHA-256, MD5, bcrypt, scrypt, or Argon2 fit the job.

7 min read

Base64URL vs Base64

A practical guide to the URL-safe Base64 alphabet, padding, JWT segments, and why ordinary Base64 can break inside URLs and filenames.

8 min read

UTF-8 and percent encoding

Understand how Unicode text becomes UTF-8 bytes, how percent encoding represents those bytes in URLs, and why copied links sometimes look unreadable.

8 min read

encodeURI vs encodeURIComponent

A practical guide for choosing between JavaScript encodeURI and encodeURIComponent when building links, query strings, callbacks, and nested URLs.

8 min read

Why MD5 and SHA-1 are legacy

Understand why MD5 and SHA-1 still appear in old checksums, why they are unsuitable for new trust decisions, and when SHA-256 or stronger options are better defaults.

8 min read

How to choose password length

A practical guide to choosing password length, understanding entropy estimates, using passphrases, and avoiding common password generator mistakes.

8 min read

How to read JSON parse errors

Learn how to interpret common JSON parse errors, spot trailing commas, quote problems, control characters, and malformed nested data from APIs or logs.

7 min read

Seconds vs milliseconds

A guide to recognizing Unix timestamp units, converting UTC and local time correctly, and avoiding common API, log, and JWT time mistakes.

8 min read

Regex greedy vs lazy

A practical JavaScript regex guide to greedy and lazy quantifiers, capture groups, replacement previews, and safer matching against real sample text.

8 min read

Text diff review workflows

A practical guide to comparing documentation, configuration, release notes, and copied snippets without turning every small change into a noisy review.

8 min read

Safe Markdown preview workflow

A practical guide to previewing Markdown structure, links, tables, code blocks, and task lists before publishing documentation or support content.

8 min read

CSS formatting review workflow

A practical workflow for formatting CSS, reviewing selector inventory, checking cascade risks, and deciding when project-level linters are still required.

8 min read

UUID v4 test identifiers

Learn when UUID v4 identifiers are useful for test data, fixtures, API examples, and mock records—and why IDs are not permissions or secrets.