100+ tools — all free, no sign-up

Your browser is a
free toolkit.

Finance, health, development, SEO and everyday tasks — running in your browser. No accounts, no installs, no friction.

✦ AI

✦ AI-powered — understands natural language

✦ 100+ Tools ✦ Zero Sign-up ✦ Runs in Browser ✦ Always Free

From the Blog

In-depth technical articles and guides.

View all →
og:image Shows in the Debugger But Not on the Platform — Every Technical Failure Mode Explained
An og:image that looks correct in Facebook's sharing debugger can still fail to render on other platforms — because relative URLs break crawler fetching, platform dimension requirements differ, WebP may not be supported by some crawlers, and CORS restrictions can block image access. Here's the complete technical checklist: absolute URLs, supplementary og:image:width/height/type tags, the 1200×630 universal dimension, and why SVG og:images fail.
JWT Uses Base64url but Basic Auth Uses Standard Base64 — Why the Encoding Choice Matters in Security Contexts
JWTs use Base64url (not standard Base64) because they appear in URLs and HTTP headers where + and / would break things. HTTP Basic Auth uses standard Base64 (not Base64url) because it's an opaque header value. Here's the three security contexts for Base64 encoding (JWT, Basic Auth, CSP nonces/hashes), why JWT payloads are encoded not encrypted (anyone with the token can read the claims), and how to detect standard Base64 vs Base64url from the encoded string.
Shodan Already Has Your Open Ports — What Attackers Learn From Port Scans and Why You Should Run Them Too
The entire internet-facing IPv4 space can be scanned in under an hour — Shodan and Censys already have your server's open ports catalogued. Here's what banner grabbing reveals (exact software versions → known CVEs), the difference between open/closed/filtered port states and why "filtered" is the preferred security posture, why SYN scanning doesn't appear in application logs, and what to look for when port scanning your own infrastructure.
Why Correct Hreflang Doesn't Guarantee Correct Language Targeting — The Content Quality Signals Google Also Checks
Correct hreflang implementation doesn't guarantee correct language targeting — Google treats hreflang as a strong hint, not a command, and will override it if the targeted language version has thin content, poor quality signals, or unreliable crawl accessibility. Here's what Google checks alongside hreflang (content quality, backlinks from the target language's web, user behavior), why machine translation creates a quality threshold problem, and how partial hreflang coverage is handled.
Canonical Tags in JavaScript Frameworks: SPAs, Next.js, and E-Commerce Faceted Navigation
React and Vue SPAs often inject canonical tags via JavaScript — which Googlebot sees only after rendering, with a processing delay. Here's how Next.js SSR handles canonicals correctly, how to manage e-commerce faceted navigation, and how to verify what Google actually sees.
Fuel Economy Converter — MPG, L/100km & km/L Explained
Learn how to convert between MPG, L/100km, and km/L, why US and UK MPG differ, and how to calculate your actual fuel cost with a free fuel economy converter and real examples.
Due Date Calculator — Find Your Estimated Due Date & Pregnancy Milestones
Learn how pregnancy due dates are calculated using Naegele's Rule, what the trimester milestones are, how accurate EDD estimates really are, and how to track your pregnancy week by week.
Why 100 Calories of Protein and 100 Calories of Fat Don't Arrive the Same Way — And Why Protein Should Come First in Your Calorie Budget
The same calorie deficit produces different results depending on what those calories are made of — protein has a 20-30% thermic effect (your body burns 20-30 calories per 100 just processing it) vs fat's 0-3%. Here's the satiety mechanisms behind protein's "keeps you full" reputation, the Protein Leverage Hypothesis for why ultra-processed food drives overeating, and why "protein first" is the most practical approach to allocating a calorie budget.
Recurring Deposits vs SIPs vs Savings Accounts: Risk, Returns, and Which Suits Your Goal
RDs guarantee returns; SIPs offer higher potential returns with market risk; regular savings accounts provide full liquidity. Here's a comparison of all three by risk, return, tax treatment, and suitable horizon — including why rupee cost averaging makes SIPs particularly effective in volatile markets.
Why a Password Generator Using Math.random() Is Less Secure Than Its Length Suggests — Entropy, CSPRNG, and What to Check
A password generator using Math.random() is not cryptographically secure — a password's effective entropy is limited by the randomness quality of the generator, not just its length and character set. Here's what password entropy actually measures (bits of theoretical guessing difficulty), why crypto.getRandomValues() is categorically different from Math.random(), why length increases entropy faster than adding special characters, and how Diceware achieves verifiable physical randomness.