Encoding & Decoding

Encode and decode Base64 in the browser, with standard and URL-safe variants, automatic direction detection, and optional file-to-Base64 conversion. Useful for API debugging and local data prep.

Percent-encode or decode text with encodeURIComponent or encodeURI. Useful for query values, non-ASCII paths, and API debugging. All processing stays in the browser.

Decode a JWT locally to show Header, Payload, and Signature, with algorithm and expiry hints. Useful for auth debugging. The token is not uploaded.

Compute SHA-1, SHA-256, SHA-384, and SHA-512 digests for text or local files, with optional HMAC mode and hash comparison. Uses Web Crypto in the browser for checksum and signing checks.

Convert HTML special characters to entities or restore entities to text. Useful for template debugging, rich-text cleanup, and escaping. Processing stays in the browser.

Convert between plain text and Unicode escape sequences (\uXXXX). Useful for inspecting API payloads, config files, and frontend strings. Conversion stays in the browser.

Convert between internationalized domain names (IDN) and Punycode (xn--). Useful for non-ASCII domain lookup, DNS setup, and mail server configuration. Conversion stays in the browser.

Generate an HMAC locally from a message and key with SHA-1/256/384/512, outputting Hex and Base64. Useful for API signing and webhook verification checks.

Convert between Latin letters/digits and Morse code (dots and dashes), with word-spacing rules. Useful for learning, puzzles, and CTF-style challenges. Conversion stays in the browser.

Convert between English letters/digits and Braille Unicode patterns. Useful for learning and display checks. Mapping covers basic English characters, not a full Chinese Braille system. Conversion stays in the browser.

Apply the classic ROT13 letter rotation, or ROT47 which covers digits and printable ASCII. Because rotation is symmetric, encoding and decoding use the same operation.

Encode and decode Bacon cipher messages with 24-letter or 26-letter alphabets. Five-symbol A/B groups are processed locally.

Encode and decode Base32 using uppercase A–Z and 2–7 per RFC 4648. Useful for case-insensitive secrets such as authenticator seeds. UTF-8 text is supported.

Encode and decode Base58, which omits visually ambiguous characters 0, O, I, and l. Useful for Bitcoin-style and IPFS-style readable strings. This is plain Base58, not Base58Check.

Convert between UTF-8 text and hexadecimal bytes. Accepts spaced, 0x, \x, or contiguous hex input with tolerant cleanup. Useful for restoring ASCII payloads from captures.

Convert UTF-8 text to and from binary, octal, decimal, or hexadecimal byte representations, with optional spacing. Useful for inspecting encodings and restoring capture fragments. Conversion stays in the browser.

Convert between UTF-8 text and octal byte sequences, with optional spacing. Useful for legacy encodings, log escapes, and puzzle workflows. Conversion stays in the browser.

Convert between Excel-style column letters (A, Z, AA) and 1-based column indexes. Useful when mapping spreadsheet headers to array indexes in scripts.

Convert integers from 1 to 3999 to standard Roman numerals and back. Rejects nonstandard forms outside common subtractive notation.

Convert between octal Unix file modes (such as 0755) and symbolic forms from ls -l (such as -rwxr-xr-x), including multi-line lists. Useful for scripting and reviewing permission dumps locally in the browser.

Build URLs from protocol, host, port, path, hash, and query parameters with automatic value escaping, or parse a full URL back into fields. Handy for API debugging and campaign link setup. Processing stays in the browser.

Strip common tracking parameters such as utm_*, spm, fbclid, and gclid from links, and extract URLs from surrounding text first when needed. Useful for tidying share links and reducing tracker noise. Cleanup runs locally in the browser.

Convert an IPv4 address to IPv4-mapped IPv6 forms, including compressed, hex-compressed, and fully expanded notations. Useful for dual-stack log comparison and allowlist drafting. Conversion runs locally in the browser.

Generate random ports in IANA ephemeral or registered ranges, with optional custom ranges, exclusion lists, and batch output. Helps avoid common port collisions for local services, Docker, and integration testing. Generation stays in the browser.

Generate RSA key pairs in the browser with the Web Crypto API at 1024, 2048, or 4096 bits and export standard PEM text. Private keys are not sent over the network. Intended for development, testing, and learning—not as a production key-management system.

Estimate password entropy, character-pool size, and theoretical offline crack time from length and character classes, with improvement suggestions. Evaluation runs entirely in the browser; passwords are not uploaded. Results are theoretical heuristics, not a guarantee of real-world security.

Generate TOTP codes from a Base32 secret in the browser, with SHA-1 / SHA-256 / SHA-512 and 6- or 8-digit codes that refresh with the system clock. Useful for troubleshooting and recovering two-factor login flows. Secrets stay local.

Estimate Shannon entropy, search-space size, and theoretical crack time from passphrase length and character pool, with a strength label. Calculation stays in the browser. Labels are heuristic—high entropy does not prove a passphrase is safe against every attack.

Compute SHA-256, SHA-384, and SHA-512 digests for selected files entirely in the browser. File contents are not uploaded. Useful for verifying downloads, images, and release artifacts against published checksums.

Compress or decompress text in the browser with CompressionStream using Deflate or Gzip, and represent binary output as Base64. Useful for testing URL payloads, state serialization size, and transport formats. Requires browser support for compression streams.

Embed text into image pixels with LSB steganography and export PNG, or extract hidden text from a stego image. Differences are usually not obvious visually. Processing stays in the browser—suited to learning LSB basics and lightweight invisible marks, not strong cryptographic secrecy.

Convert between text and Ascii85 (Base85), including common <~ … ~> delimited form. Useful for PDF streams, some legacy systems, and reverse-engineering snippets. Encoding and decoding run locally in the browser.

Inspect each character’s UTF-8 bytes, hex form, and code points. Useful for debugging emoji, multi-byte CJK, and length-limit issues. Analysis runs locally in the browser.