All Tools
QR codes, passwords, hashes, JWT, base64, speed test — 14 developer & daily tools
A pragmatic toolkit of 14 developer and daily-use utilities — all running 100% in your browser, no uploads, no sign-up, no cookies. Bookmark one or bookmark them all.
For everyday tasks: QR Code Generator (URL, text, contact, Wi-Fi credentials — custom colours and error correction), Barcode Generator (Code128, EAN-13, UPC-A), Password Generator (strength meter, 8–128 chars), Word Counter (words, characters, sentences, paragraphs + reading time), Lorem Ipsum Generator and Color Picker & Converter (HEX ↔ RGB ↔ HSL ↔ CMYK with a colour wheel).
For developers: JSON / CSV / XML Formatter (pretty-print, validate, JSON↔CSV conversion), JWT Decoder & Verifier (HS256/384/512 + RS256/384/512 verification via Web Crypto — your tokens never leave the browser), Hash Generator (MD5 / SHA-1 / SHA-256 / SHA-512 for text or files with streaming for large files), Base64 Encoder / Decoder (URL-safe, line-wrap, file-to-data-URI with preview), URL Encoder / Decoder (3 modes + query-string builder + copy-as-curl) and Unix Timestamp Converter (epoch ↔ ISO 8601 ↔ any IANA timezone, batch mode, live clock).
For your network: Internet Speed Test runs Cloudflare's own open-source measurement engine (the one behind speed.cloudflare.com) straight in your tab — download, upload, latency, jitter, packet loss and bufferbloat, all with a futuristic 270° gauge.
Privacy by default: every tool here is 100% client-side. No token, password, hash input, image or payload is uploaded. You can verify in DevTools → Network: zero outbound requests during use.
QR Code Generator
Generate QR codes for URLs, text, contacts, WiFi
Barcode Generator
Generate Code128, EAN-13, UPC-A barcodes
Password Generator
Generate strong random passwords
Word Counter
Count words, characters, sentences, paragraphs
Lorem Ipsum Generator
Generate placeholder text for designs
Color Picker & Converter
Convert between HEX, RGB, HSL, CMYK color formats
JSON / CSV / XML Formatter
Format, validate, and convert data formats
Internet Speed Test
Measure download, upload, latency and packet loss against Cloudflare's global edge — 100% in your browser
URL Encoder / Decoder
Encode or decode URL components in three flavours, with a live query-string builder
Unix Timestamp Converter
Convert between unix time, ISO 8601 and any timezone — with a live clock and batch mode
Base64 Encoder / Decoder
Encode or decode Base64 text and files — live, URL-safe, data URIs, 100% client-side
Hash Generator (MD5 / SHA-1 / SHA-256 / SHA-512)
Compute MD5, SHA-1, SHA-256 and SHA-512 for text or files — live, in your browser
JWT Decoder & Verifier
Decode, humanise and verify JSON Web Tokens — all client-side
P0F OS Fingerprint Checker
Check what your TCP/IP fingerprint reveals about your operating system. Detect VPN/proxy usage and OS mismatches.
Frequently Asked Questions
Common questions about our all tools
No — not a single one. Every utility in this section runs entirely in your browser. Passwords, JWT tokens, hash inputs, QR code contents, base64 payloads and URL strings stay on your device. You can confirm in DevTools → Network: no outbound requests fire while you use the tools.
Yes — we wrote it specifically because pasting a production JWT into a random web decoder is a terrible idea. Our decoder uses the browser's native Web Crypto API for both parsing and signature verification; the token is never attached to any analytics event, never logged, never uploaded. History is off by default. For extra safety, open the page, then disconnect your network before pasting a sensitive token.
Very — we use Cloudflare's open-source measurement engine (the exact one at speed.cloudflare.com), which runs against their global anycast network of 330+ datacenters. Peak numbers match Ookla within a few percent on any decent home connection. For absolute precision you still want an Ethernet-connected desktop client, but no other web tool will beat this one.
For integrity verification (ISO downloads, file checksums): MD5 or SHA-1 are fine and widely used despite being cryptographically broken. For anything security-related (password hashing, signature verification): always use SHA-256 or SHA-512. Our tool outputs all four in parallel so you can match whatever the source used.
Yes — the QR Code Generator has a dedicated Wi-Fi mode where you enter SSID, password and authentication type (WPA/WPA2/WPA3 or open). The resulting QR is scanned by iOS Camera and Android since Android 10; phones prompt to join the network automatically without typing the password.
Standard Base64 uses + and / characters plus = for padding, which break when embedded in URLs or JWT segments. URL-safe Base64 (RFC 4648 §5) substitutes - and _ and drops the padding. Switch the toggle when your output will be used in a URL path, query parameter, JWT, or S3 object key.