All tools
Security & tokens
JWT DecoderDecode a JSON Web Token and inspect its header, payload and expiry without sending it anywhere.JWT EncoderBuild and sign a JSON Web Token in your browser with HS, RS, PS, ES or EdDSA — or produce an unsecured "alg: none" token to inspect.JWT Signature VerifierCheck whether a JSON Web Token signature is valid and whether the token is still within its validity window.
Encoding
Base64 EncodeEncode text or files to Base64, with standard or URL-safe alphabets and optional line wrapping.Base64 DecodeDecode Base64 back to text, choosing the character set (UTF-8, EUC-KR, Shift_JIS, GBK…) so the result reads correctly.File to Base64 / Base64 to FileTurn any file into a Base64 string or a data URI, and turn Base64 back into a downloadable file.Base32 EncodeEncode text to RFC 4648 Base32, with optional Base32hex alphabet and padding control.Base32 DecodeDecode RFC 4648 Base32 (or Base32hex) back to text or bytes, with a selectable output character set.Base58 EncodeEncode data with the Bitcoin/IPFS Base58 alphabet, optionally with a Base58Check checksum.Base58 DecodeDecode a Base58 or Base58Check string back to bytes, hex or text.Hex EncodeConvert text to hexadecimal (Base16) with a choice of separator, casing and source character set.Hex DecodeTurn a hex dump back into readable text, tolerating spaces, 0x prefixes and line breaks.URL EncodePercent-encode a URL or query string, with component and full-URI modes plus optional form (+) encoding.URL DecodeDecode percent-encoded URLs and query strings back to readable text, including non-Latin characters.HTML Entity EncodeEscape characters that break HTML — &, <, >, quotes — with named or numeric entities.HTML Entity DecodeTurn &, ' and other HTML entities back into the characters they represent.Hex Dump ViewerView text or a file as a classic hex dump: offsets, hex bytes and the printable ASCII gutter.URL ParserBreak a URL into scheme, host, port, path segments and decoded query parameters.Text ↔ Binary ConverterConvert text to its binary representation and back, one 8-bit group per byte.Punycode / IDN ConverterConvert an internationalised domain to its xn-- form and back — the check that reveals a look-alike phishing domain.Quoted-Printable Encode & DecodeDecode the =C3=A9 sequences in a raw email header or body, choosing the character set so the text reads correctly.Morse Code TranslatorTranslate text to Morse code and back, including digits and punctuation.CBOR Encode & DecodeConvert between JSON and CBOR, the binary format behind WebAuthn attestations, COSE signatures and most IoT payloads.
Date & time
Epoch & Unix Timestamp ConverterConvert a Unix timestamp to a human-readable date in any time zone, and back again — seconds, milliseconds or microseconds.Current Unix TimestampThe current Unix epoch time in seconds and milliseconds, updating live, with the matching UTC and local date.Batch Timestamp ConverterPaste a whole column of timestamps or dates and convert every line at once, ready to paste back into a spreadsheet.Time Zone ConverterSee one instant across every major time zone at once, with the offset that actually applied on that date.Duration ConverterConvert a duration between seconds, minutes, hours, clock notation and ISO 8601 — 90m, 01:30:00 and PT1H30M all read the same.Cron Expression ParserRead a cron expression in plain words, field by field, before it runs in production at the wrong time.Age & Date Difference CalculatorExact age in years, months and days, and the gap between two dates — including weekdays only.
Hash
MD5 Hash GeneratorGenerate an MD5 checksum of text or a file. Fast and universal, but broken for security — use SHA-256 for anything that matters.SHA-1 Hash GeneratorCompute a SHA-1 digest of text or a file. Still used by Git and legacy systems, but no longer collision-resistant.SHA-256 Hash GeneratorCompute a SHA-256 digest of text or a file — the default choice for checksums, signatures and content addressing.SHA-384 Hash GeneratorCompute a SHA-384 digest — SHA-512 truncated, used where a 384-bit output is specified.SHA-512 Hash GeneratorCompute a SHA-512 digest of text or a file. Faster than SHA-256 on 64-bit hardware, with twice the output length.CRC-32 ChecksumCompute the CRC-32 checksum used by ZIP, PNG and gzip. Detects accidental corruption — it is not a security hash.CRC-16 ChecksumCompute a CRC-16/ARC checksum, the variant used by Modbus and many serial protocols.HMAC GeneratorGenerate an HMAC signature with SHA-1, SHA-256, SHA-384 or SHA-512 — the standard way to sign webhooks and API requests.PBKDF2 Key DerivationDerive a key from a password with PBKDF2, choosing the salt, iteration count, digest and output length.SHA3-224 Hash GeneratorCompute a SHA3-224 digest of text or a file — the sponge-based FIPS 202 standard, structurally unrelated to SHA-2.SHA3-256 Hash GeneratorCompute a SHA3-256 digest. Immune to the length-extension attack that SHA-2 needs HMAC to work around.SHA3-384 Hash GeneratorCompute a SHA3-384 digest of text or a file, entirely in the browser.SHA3-512 Hash GeneratorCompute a SHA3-512 digest — the widest SHA-3 output, at half the throughput of SHA3-256.Keccak-224 Hash GeneratorCompute the original Keccak-224 digest, which differs from SHA3-224 only in its padding byte.Keccak-256 Hash GeneratorCompute Keccak-256 — what Ethereum means by "keccak256", and not the same as SHA3-256 despite the size.Keccak-384 Hash GeneratorCompute the original Keccak-384 digest.Keccak-512 Hash GeneratorCompute the original Keccak-512 digest.RIPEMD-160 Hash GeneratorCompute a RIPEMD-160 digest — the second half of how a Bitcoin address is derived from a public key.RIPEMD-128 Hash GeneratorCompute a RIPEMD-128 digest. Too short to resist collisions today; kept for compatibility.RIPEMD-256 Hash GeneratorCompute a RIPEMD-256 digest — a longer output than RIPEMD-128, but not a stronger one.RIPEMD-320 Hash GeneratorCompute a RIPEMD-320 digest — the widest RIPEMD output, with RIPEMD-160’s security level.BLAKE2b Hash GeneratorCompute a BLAKE2b digest — faster than MD5 on 64-bit hardware while being as secure as SHA-3.BLAKE2s Hash GeneratorCompute a BLAKE2s digest — the 32-bit variant, aimed at embedded and 32-bit platforms.SHA-224 Hash GeneratorCompute a SHA-224 digest — the SHA-256 compression function with a different initial value, truncated to 224 bits.SHA-512/224 Hash GeneratorCompute a SHA-512/224 digest — SHA-512 with a different IV, truncated. Faster than SHA-224 on 64-bit hardware.SHA-512/256 Hash GeneratorCompute a SHA-512/256 digest — a 256-bit output that is immune to length-extension, unlike plain SHA-256.Double SHA-256 (hash256)Apply SHA-256 twice, as Bitcoin does for block headers and transaction ids — the construction that defeats length-extension.MD4 Hash GeneratorCompute an MD4 digest. Completely broken, but still needed to read NTLM password hashes and some legacy formats.MD2 Hash GeneratorCompute an MD2 digest. Predates MD4, is slower than everything since, and survives only in very old X.509 certificates.SHAKE128 / SHAKE256 (XOF)Squeeze any number of bytes out of SHAKE128 or SHAKE256 — an extendable-output function, not a fixed-size digest.cSHAKE (customizable XOF)SHAKE with a customization string, so two uses of the same function in one system can never collide.KMAC128 / KMAC256A keyed MAC built directly on Keccak — the SHA-3 era replacement for HMAC, with no nested-hash construction needed.TupleHashHash a list of strings unambiguously — ["ab","c"] and ["a","bc"] give different digests, unlike any plain hash of the concatenation.EvpKDF (OpenSSL key derivation)Derive a key and IV the way OpenSSL’s EVP_BytesToKey does — the scheme behind `openssl enc -k`, needed to decrypt anything it produced.Custom CRC CalculatorCompute a CRC with your own polynomial, initial value, reflection and final XOR — the parameters that make two CRC tools disagree.BLAKE3 Hash GeneratorCompute a BLAKE3 digest of text or a file — a tree hash that is faster than BLAKE2 and produces output of any length.bcrypt Hash & VerifyHash a password with bcrypt at a cost you choose, or check one against an existing $2y$ hash — computed in your browser.
Cryptography
AES Encryption & DecryptionEncrypt and decrypt text with AES-GCM or AES-CBC using a passphrase. The salt and IV travel with the ciphertext, so nothing else has to be kept.RSA Key Pair GeneratorGenerate an RSA key pair in your browser and export it as PKCS#8 / SPKI PEM or JWK. The private key never leaves the page.RSA Sign & VerifySign a message with an RSA private key and verify it with the public key, using RSASSA-PKCS1-v1_5 or RSA-PSS.RSA Encryption & DecryptionEncrypt a short message with an RSA public key (RSA-OAEP) and decrypt it with the private key.ECDSA Key Pair GeneratorGenerate an elliptic-curve key pair (P-256, P-384 or P-521) as PEM or JWK — far smaller than RSA at the same security level.ECDSA Sign & VerifySign a message with an elliptic-curve private key and verify it with the matching public key.DES Encryption & DecryptionEncrypt and decrypt with single DES using an OpenSSL-compatible passphrase format. Its 56-bit key has been brute-forceable since 1998.Triple DES Encryption & DecryptionEncrypt and decrypt with Triple DES (EDE). Deprecated by NIST in 2023, but still embedded in payment and banking systems.RC4 Encryption & DecryptionApply the RC4 stream cipher. It is its own inverse, so one operation covers both directions — and its keystream bias is why TLS dropped it.XXTEA Encryption & DecryptionEncrypt and decrypt with XXTEA (Corrected Block TEA) — tiny enough to fit in a few lines, and common in game and embedded code.SPECK Encryption & DecryptionEncrypt and decrypt with SPECK 64/128, the NSA lightweight block cipher that ISO declined to standardise.
Format
JSON FormatterPretty-print JSON with your choice of indentation, optionally sorting keys so two payloads can be compared.JSON MinifierStrip every unnecessary space and newline from JSON, and see how many bytes that saves.JSON ValidatorCheck whether JSON is valid and get the exact line and column of the first error, not just "unexpected token".JSON Viewer & Path ExplorerFlatten JSON into dotted paths so you can find the value you need and copy the exact path to it.XML FormatterReindent XML so nesting is readable, or minify it back down to a single line.XML ValidatorCheck that XML tags are balanced and correctly nested, and get the line where the structure breaks.JSON ↔ CSV ConverterTurn an array of JSON objects into a spreadsheet-ready CSV and back, handling quoted fields and embedded commas properly.YAML Formatter & ValidatorReindent YAML, check that it parses, and see the structure it actually produces rather than the one you assumed.JSON ↔ YAML ConverterConvert JSON to YAML and back, quoting the strings that would otherwise be read back as numbers or booleans.JSON DiffCompare two JSON documents structurally, so a difference in key order or indentation is not reported as a change.XML MinifierStrip whitespace and comments from XML for transport, leaving attribute values and CDATA untouched.SQL FormatterBreak a query onto its clauses and upper-case the keywords, without touching identifiers or string literals.HTML Formatter & MinifierReindent HTML with correct handling of void elements, and leave the contents of pre, textarea and script alone.CSS Formatter & MinifierPut each declaration on its own line, or collapse a stylesheet to one — without turning a:hover into a: hover.JavaScript Formatter & MinifierReindent JavaScript by block, preserving strings, template literals and comments exactly as written.
Convert
Case ConverterConvert between camelCase, PascalCase, snake_case, kebab-case, CONSTANT_CASE, Title Case and more — line by line.Number Base ConverterConvert between binary, octal, decimal and hexadecimal, including values too large for a JavaScript number.Color Converter (HEX / RGB / HSL)Convert a colour between HEX, RGB and HSL, with a preview and the WCAG contrast ratio against black and white.Unit ConverterConvert length, mass, data, area, volume, speed, angle and temperature — every unit in the category at once, not just one pair.BMI CalculatorBody mass index with the WHO or the Asia-Pacific thresholds, plus the healthy weight range for your height.Compound Interest CalculatorCompound or simple interest with regular contributions, and a year-by-year schedule.
Generator
UUID v4 GeneratorGenerate random UUIDs (v4) in bulk, using the browser’s cryptographic random source — never Math.random.UUID v7 GeneratorGenerate time-ordered UUIDs (v7). They sort chronologically, which keeps database indexes from fragmenting the way v4 does.UUID v1 GeneratorGenerate time-based UUIDs (v1) with a random node id, so no MAC address is leaked.UUID v3 / v5 GeneratorGenerate deterministic UUIDs from a namespace and a name — the same input always produces the same id.ULID GeneratorGenerate ULIDs: 26 Crockford Base32 characters, sortable by time and safe to read aloud or type by hand.Password GeneratorGenerate strong random passwords in your browser, with a live entropy estimate. Nothing is transmitted or stored.Lorem Ipsum GeneratorGenerate placeholder paragraphs, sentences or words for mockups and layout tests.Random Number GeneratorDraw random integers from a range, with or without repeats, using a cryptographic random source.UUID v6 GeneratorGenerate UUID v6 values — v1 with its timestamp reordered so the ids sort chronologically as strings.QR Code GeneratorGenerate a QR code as SVG or PNG in your browser, with a choice of error-correction level. Nothing about what you encode is uploaded.htpasswd GeneratorGenerate an Apache htpasswd entry with APR1 or {SHA}, and verify an existing one — without sending the password to a server.
Compression
GZIP Compress & DecompressCompress text or a whole file to GZIP and back, in the browser. A .gz you create here carries the original file name, so gzip -d restores it.DEFLATE Compress & DecompressCompress and decompress text or a file with raw DEFLATE or zlib framing — the algorithm underneath GZIP, ZIP and PNG.ZIP Create & ExtractBuild a ZIP archive from files you pick, or open one and read what is inside — all in the browser, with nothing uploaded.TAR Create & ExtractBuild or read a USTAR archive. TAR only bundles files — pair it with the GZIP tool to produce a .tar.gz.
Text
Word & Character CounterCount characters, words, sentences and paragraphs — counting CJK characters correctly rather than treating a whole sentence as one word.Sort, Dedupe & Reverse LinesSort lines alphabetically or naturally, remove duplicates, trim whitespace and drop empty lines in one pass.URL Slug GeneratorTurn a title into a clean URL slug, either transliterating accents to ASCII or keeping the original script.Regular Expression TesterTest a JavaScript regular expression against your text and see every match, capture group and named group.Text Compare (Diff)Compare two blocks of text line by line and see exactly what was added, removed or left alone.Syntax HighlighterHighlight a snippet of JavaScript, TypeScript, JSON, CSS, HTML, SQL, Python or shell, and copy it as HTML.ROT13 & Caesar CipherRotate letters by any shift. ROT13 is its own inverse, so one button both hides and reveals.Email & URL ExtractorPull every email address, link or IP out of a wall of text, de-duplicated and sorted.Keyword Density CheckerCount which words and phrases a text actually leans on, as a share of the whole.Palindrome CheckerCheck whether a text reads the same backwards, with or without spaces and punctuation.Text RepeaterRepeat a line any number of times, with your own separator and optional numbering.