Developer Tools

Speed up your daily workflow with 18 free developer utilities for encoding, formatting, parsing, generating, and testing common data formats.

From prettifying JSON and decoding JWTs to generating UUIDs, bcrypt hashes, and regex patterns — everything runs entirely in your browser. No scripts, no installs, no data sent to any server.

Encoding & Decoding
Base64 Encoder / Decoder
Encode any text or file to Base64 and decode Base64 strings back to plain text or binary. Supports URL-safe variant.
Use Base64
URL Encoder / Decoder
Encode special characters for safe use in URLs, or decode percent-encoded URL strings back to plain text instantly.
Use URL Encoder
HTML Entities
Encode HTML special characters into entities (&, <, >) or decode them back to plain text for safe output.
Use HTML Entities
Number Base Converter
Convert numbers between binary, octal, decimal, and hexadecimal bases with full step-by-step conversion output.
Use Base Converter
Formatting & Parsing
JSON Formatter
Validate, format, and minify JSON. Prettify messy JSON with syntax highlighting and detailed error detection.
Use JSON Formatter
JSON Unescape & Cleaner
Remove backslashes and clean escaped JSON. Handles stringified, double-escaped, and HTML-entity-encoded JSON.
Use JSON Unescape
JSON Diff
Compare two JSON documents side by side. Highlights added, removed, and changed values with structural diff.
Use JSON Diff
JWT Decoder
Decode and inspect JWT tokens. View header, payload, and signature claims without needing the secret key.
Use JWT Decoder
Regex Tester
Write and test regular expressions with live match highlighting, group capture display, and full flag support.
Use Regex Tester
Timestamp Converter
Convert Unix timestamps to human-readable dates and back. Supports UTC and local timezones.
Use Timestamp Converter
Cron Explainer
Paste any cron expression and get a plain-English description of when it runs, plus the next execution times.
Use Cron Explainer
Color Converter
Convert colours between HEX, RGB, RGBA, HSL, HSLA, and HSV formats with a live colour preview swatch.
Use Color Converter
REST API Checker
Send HTTP requests (GET, POST, PUT, DELETE) with custom headers and body. Inspect response status, headers, and body.
Use REST API Checker
Security & Generation
Password Generator
Generate strong, cryptographically random passwords with customisable length, character sets, and complexity rules.
Use Password Generator
UUID Generator
Generate cryptographically random UUID v4 identifiers. Bulk-generate UUIDs and copy them with one click.
Use UUID Generator
Hash Generator
Generate MD5, SHA-1, SHA-256, and SHA-512 hashes for any input text. Useful for integrity checks and fingerprinting.
Use Hash Generator
Bcrypt Generator
Hash passwords using bcrypt with configurable cost factors. Verify any bcrypt hash against a plain-text password.
Use Bcrypt Generator
Random String Generator
Generate random strings of any length using letters, numbers, symbols, or a fully custom character set.
Use Random String

Free Online Developer Tools

Our developer tools collection helps programmers work faster: encode/decode Base64, URLs, and HTML entities; format and validate JSON; diff JSON documents; decode JWTs; test regular expressions; convert Unix timestamps and number bases; explain cron schedules; convert colours; check REST APIs; and generate passwords, UUIDs, hashes, bcrypt hashes, and random strings — all free, in-browser, no login required.

From the Blog

In-depth technical articles and guides.

View all →
HTML Entities — Encode & Decode Special Characters for Correct, Safe HTML
Learn what HTML entities are, why they exist, the most common named entities, how numeric entities work for any Unicode character, and when modern UTF-8 pages don't need them — with a free HTML entities tool.
In UTF-8, Most HTML Entities Are Unnecessary — But These Five Still Are
HTML entities were invented to survive character encoding translation before UTF-8 was universal. In today's UTF-8 world, é and é are identical — but five entities (&, <, >, ", ') remain essential because they escape characters that have structural meaning in HTML, not encoding meaning. Here's which entities are legacy, which remain necessary, and why   is a special case that's about rendering behavior rather than encoding.
JWT Token Refresh Strategies: Access Tokens, Refresh Rotation, and When Sessions Beat JWTs
Short-lived access tokens require a refresh mechanism — and how you implement that mechanism determines your app's security and user experience. Here's refresh token rotation, silent refresh in SPAs, theft detection via refresh token families, and the cases where server-side sessions are simpler and safer.
Y2K, Y2K38, and Excel's 1900 Leap Year Bug: The Dates That Break Software
Y2K cost $300–600 billion to mitigate. The Unix 2038 problem will overflow signed 32-bit timestamps on 19 January 2038. Excel has counted 29 February 1900 as a real date since the 1980s. Here's the structural causes of each date bug and which ones are still ticking.
Negative Numbers, Overflow, and What Hex Reveals About Your Data
Most developers can convert hex to decimal — but two's complement, signed overflow, and bit-width boundaries are where base conversion becomes genuinely useful for debugging real problems.
Structured JSON Logging: How to Debug Production API Errors and Search Logs at Scale
Structured JSON logs are queryable across millions of events in milliseconds; unstructured string logs require brittle grep. Here's why JSON logging matters, the OpenTelemetry log schema standard, structured logging libraries in Python/Node/Go, and how formatting API error responses reveals everything needed to debug a production incident.
How File Hash Verification Actually Works: Determinism, the Avalanche Effect, and What "Match" Really Means
Hashing the same file twice, a year apart, on different computers, produces the exact same hash — this single property, determinism, is the foundation of file-integrity verification. Here's how the avalanche effect guarantees "match or no match, with no partial credit," why fixed output size makes hash comparison practical for huge files, the proper download-verification workflow, and why where a published hash comes from matters as much as the comparison itself.
JWT Decoder — Debug Authentication Errors by Inspecting Token Claims
Learn how to use a JWT decoder to debug 401 errors, understand the header, payload, and signature sections, check expiry and audience claims, and identify security issues like alg:none attacks.
Why Your RTC Chip Returns 89 When the Time Is 59 — BCD, Gray Code, and Other Number Encodings in Modern Hardware
Binary-Coded Decimal (BCD) encodes each decimal digit as a 4-bit group — which is why real-time clock chips return 0x59 to mean 59 seconds (not 89), and why hardware with BCD limits constrains values to 0-99 rather than 0-255. Here's BCD in RTC hardware and financial calculations, Gray code's one-bit-change property that prevents rotary encoder errors, and why TCP checksums use one's complement arithmetic.
Regex Patterns Every Developer Should Have: A Practical Reference
A practical reference of the regex patterns developers actually need — email, URL, UUID, IP address, dates, semver, hex colours, slugs, and more — with edge cases and caveats for each.