All Tools50 tools

Format, validate, and minify JSON. Configurable indentation, key sorting, and detailed error reporting.

Format, validate, and convert YAML ↔ JSON ↔ .properties. Configurable indentation and error reporting.

Convert between CSV and JSON. Custom delimiters, header detection, and proper quote handling.

Pretty-print XML and HTML with proper indentation. Handles self-closing tags, nested elements, and attributes.

Compare two texts side by side with color-coded additions, deletions, and unchanged lines.

Write markdown and see rendered HTML in real-time. Supports headings, lists, code blocks, links, and more.

Test regular expressions with real-time matching, capture groups, and highlighted results. Common pattern library included.

Query JSON data with JSONPath expressions. Dot notation, wildcards, recursive descent, and array slices.

Convert colors between HEX, RGB, and HSL formats. Live preview swatch with opacity variations.

Convert between binary, octal, decimal, and hex. Bit visualization and two's complement support.

Generate cryptographically secure secrets in hex, Base64, or alphanumeric. For API keys and tokens.

Generate UUID v4 identifiers using crypto.randomUUID(). Bulk generation up to 50 at once.

Convert Unix timestamps to dates and back. Live world clock across 30+ time zones. ISO 8601, RFC 2822, and relative time.

Visual cron schedule builder — set fields, see human-readable description, and next 5 run times.

Generate placeholder text by paragraphs, sentences, or words. Optional HTML wrapping and classic start.

Entropy-based scoring with crack-time estimation and actionable improvement suggestions.

AES-256-GCM with PBKDF2 key derivation. Paste text and a password, get encrypted output instantly.

Generate 2048 or 4096-bit RSA key pairs in PEM format for JWT RS256, signing, or OAEP encryption.

Encrypt messages with an RSA public key and decrypt with the private key. Uses RSA-OAEP with SHA-256.

Generate P-256, P-384, or P-521 elliptic curve key pairs in PEM or JWK format. For JWT ES256/ES384/ES512 and ECDSA.

Decode JWT header and payload. Automatically flags insecure algorithms, missing claims, and expired tokens.

Edit JWT claims live, re-sign with HMAC, verify signatures, and compare original vs modified tokens.

Create and sign JWTs with HS256, HS384, or HS512. Set expiry, add custom claims, copy instantly.

Generate OAuth 2.0 code_verifier and code_challenge for secure Authorization Code flow (RFC 7636).

Generate TOTP secrets with QR code for Google Authenticator, Authy, and 1Password 2FA setup.

Generate MD5, SHA-1, SHA-256, SHA-384, SHA-512 hashes. Results update in real-time as you type.

Generate HMAC-SHA256, HMAC-SHA384, HMAC-SHA512 signatures for webhook verification and API signing.

Generate and verify bcrypt password hashes with configurable cost factor. See real hashing time.

Generate and verify Argon2id, Argon2i, and Argon2d password hashes. Tune memory, iterations, and parallelism.

Standard and URL-safe Base64. Handles Unicode. Paste text or base64 to instantly convert.

Percent-encode and decode URLs. Supports encodeURIComponent and full encodeURI modes.

Encode special characters as HTML entities for XSS prevention. Decode named and numeric entities back to text.

Build Content-Security-Policy headers with an interactive UI. Configure directives, sources, and copy the result.

Paste HTTP response headers to audit for missing or weak security headers. Get actionable recommendations.

Generate Subresource Integrity hashes for CDN scripts and stylesheets. SHA-256/384/512 with ready-to-use HTML tags.

Generate Apache .htaccess rules for HTTPS redirects, caching, compression, security headers, and access control.

Sort, deduplicate, compare .env files. Convert to Docker, Kubernetes, or JSON format. Mask values for screenshots.

Full Lighthouse audit on any URL — performance, SEO, accessibility, and best practices with Core Web Vitals.

Query DNS records — A, AAAA, MX, TXT, CNAME, NS, SOA, and more. Powered by Google DNS-over-HTTPS.

Look up domain registration info — registrar, creation date, expiry, nameservers, and DNSSEC status via RDAP.

Analyze any domain's SSL/TLS configuration — certificate details, protocol support, vulnerabilities, and grade.

Check if a password has appeared in known data breaches using Have I Been Pwned's k-anonymity API. Your password never leaves the browser.

Build nginx.conf visually — reverse proxy, SSL, caching, rate limiting, security headers. Presets for Node.js, WordPress, SPA.

Validate docker-compose.yml — check services, ports, volumes, networks, depends_on, and flag common mistakes.

Generate HTML meta tags for SEO, OpenGraph, and Twitter Cards. Preview how your page appears in search and social.

Generate Schema.org structured data for Articles, Products, FAQPages, Organizations, and more. Boost rich results.

Build robots.txt with user-agent rules, allow/disallow paths, crawl-delay, and sitemap directives. Preset templates included.

Paste a PEM certificate to inspect subject, issuer, SANs, expiry status, key algorithm, and SHA-256 fingerprint.

Convert RSA and EC keys between JWK (JSON Web Key) and PEM formats. Supports SPKI, PKCS#8, ECDSA, and RSA-OAEP.

Generate Ed25519 or RSA SSH key pairs in OpenSSH format. Ed25519 recommended for new deployments.