Developer tools. Fast and private.
Formats, validates and minifies JSON in real time, with clear syntax-error diagnostics.
Formats, validates and minifies XML in real time, with clear syntax-error diagnostics.
Converts CSV to JSON and JSON to CSV, with flexible delimiters and nested data.
Encodes and decodes Base64 in real time — accepts text and images, both directions.
Encodes and decodes values for use in URLs — query parameters and path segments.
Encodes and decodes HTML's reserved characters (& < > " ') to display text safely.
Decodes a JSON Web Token's header and payload, presenting every claim in readable form.
Generates and signs a JSON Web Token with the claims, algorithm and key you define.
Computes MD5, SHA-1, SHA-2, SHA-3 and BLAKE for any text — all at once, in real time.
Generates strong random passwords, with fine composition control and an entropy meter.
Share passwords and secrets through a self-destructing link — unreadable even to the server.
Generates v4 and v7 UUIDs (RFC 9562), one at a time or in batches, ready to copy.
Generates Lorem Ipsum text in words, sentences or paragraphs, ready to copy.
Generates and validates CPF/CNPJ, including the new alphanumeric format, with exact check digits.
Converts numbers between binary, octal, decimal, hexadecimal and any base from 2 to 36.
Converts a color between HEX, RGB, HSL and HSV at once, with live preview and a screen eyedropper.
Converts a value between length, mass, temperature, volume, area, speed and digital storage.
Converts between Unix timestamps (epoch) and readable date/time, both ways, in real time.
Calculates date differences or adds/subtracts time — business days, ISO week and more.
Explains a cron expression in plain English and calculates the next run times.
Converts identifiers between camelCase, PascalCase, snake_case, kebab-case and CONSTANT_CASE.
Share code, logs, or configs via an expiring link, with optional encryption (server can't read it).
Look up a domain's DNS records — A, AAAA, CNAME, MX, NS, TXT, SOA and CAA.
Look up a domain's registration data — registrar, dates, nameservers and status — via RDAP.
Inspect a domain's TLS certificate — validity, issuer, subject/SANs and protocol version.
Fetches a URL and evaluates the response's security headers — CSP, HSTS, X-Frame-Options and more.
Paste the JSON an API should return and get a real URL to test your frontend against.
Extracts and decodes URL parameters — paste the whole URL or just the query string.
Builds and encodes a query string from editable key/value pairs.
Explains any HTTP status code — originating RFC, common causes, and related codes.