JWT decoder, hash generator, secret scanner, base64 encoder, regex tester, and more. All processing happens in your browser — your data never leaves your machine.
Decode JWT headers and payloads instantly. Inspect claims, check expiry, and view token structure — without sending tokens to any server.
Open Tool →Generate SHA-1, SHA-256, SHA-512, and MD5 hashes locally using the Web Crypto API. Your input never leaves the browser.
Open Tool →Paste code or config files to scan for leaked API keys, tokens, private keys, and hardcoded secrets. 100% local regex matching.
Open Tool →Encode and decode Base64 strings instantly. Handles text and binary-safe conversions with zero server round-trips.
Open Tool →Test regular expressions with live match highlighting, capture groups, and flag support. All pattern matching runs locally.
Open Tool →Percent-encode and decode URLs and query parameters. Essential for API work, redirects, and form submissions.
Open Tool →Convert between Unix epochs and human-readable dates. Live ticker shows current timestamp. Zero server calls.
Open Tool →Generate cryptographically secure v4 UUIDs using crypto.randomUUID(). Batch generation supported.
Open Tool →Analyze password entropy, crack time estimates, and composition rules. Your password is never transmitted anywhere.
Open Tool →Format, sort, and align .env files locally. Keep your secrets safe — nothing is uploaded or stored.
Open Tool →Strip IPs, emails, API keys, and PII from server logs before sharing. Regex-based scrubbing runs entirely in your browser.
Open Tool →Encode and decode HTML entities to prevent XSS. Convert special characters safely for embedding in markup.
Open Tool →Pre-warm your CDN edge cache by fetching URLs from your sitemap. See HIT/MISS status, response times, and auto-detect Cloudflare, Fastly, Akamai.
Open Tool →These tools handle one-off checks. Pulse monitors your domains, SSL certs, DMARC records, and subdomains weekly — and emails you when anything changes.
Start Free Monitoring →