Generate one-time codes from a Base32 secret. Paste an otpauth:// URI to auto-fill all options. Compatible with Google Authenticator, 1Password, Authy and any RFC 6238 / 4226 client. Nothing stored.

Generate a QR code from any text or URL. Works great for otpauth:// URIs to import into Authenticator apps.

URL Encoder / Decoder

Percent-encode or decode. Choose Component (encodes everything) or Full URL (preserves :/?#[] structure).

JSON Formatter

Validate, pretty-print, or minify JSON. Errors show exact line and column.

Inspect header, payload, and claims. Verify HS256 / RS256 / ES256 signatures locally — your secrets and keys never leave the browser.

Hash Generator

SHA-1, SHA-256, and SHA-512 digests. Type text or drop a file.

Hex Converter

Convert text to hex bytes or decode hex back to text. Choose display format below.

HTML Entities

Encode special characters to HTML entities, or decode them back. Click a reference entry to insert it.

Regex Tester

Test regular expressions live. Matches are highlighted; groups shown in the match list.

Text Diff

Line-by-line comparison of two texts. Green = added, red = removed.

Color Converter

Enter a color in any format — HEX, rgb(), or hsl(). See and copy all formats instantly.

UUID Generator

Generate RFC 4122 version 4 UUIDs using cryptographically random bytes.

Password Generator

Cryptographically random passwords using crypto.getRandomValues. Pick length and character set.

Cryptographically random integers or decimals from crypto.getRandomValues with rejection sampling for true uniformity. Pick a range, count, and format. No Math.random bias.

A real 3D coin flip in the browser. Each outcome is one bit drawn from crypto.getRandomValues — the animation is purely cosmetic, the result is provably 50/50.

Unix Timestamp

Convert between Unix epoch seconds and human-readable dates. Local and UTC.

Drop an image to redact (mosaic / blur / solid block) and annotate (arrow, rectangle, text, pen). Everything happens in your browser — nothing is uploaded. Download the result as PNG.

Drop a file (up to 50 MB) and get a public URL that auto-expires in 24 hours. The standalone page also exposes an agent prompt variant so AI agents that can fetch URLs are told explicitly to download and read the file.