1
Pick the developer tool you need: JSON formatter, JWT decoder, regex tester, hash generator, base64, URL encoder, etc.
2
Paste your input — JSON, JWT, regex pattern, string, or binary data.
3
Adjust options like indentation, hash algorithm, or encoding charset.
4
Copy the formatted output or download it as a file.

Key features

JSON formatter, validator, and minifier with JSONPath query support
JWT decoder showing header, payload, signature, and expiration
Hash generator: MD5, SHA-1, SHA-256, SHA-384, SHA-512, HMAC
Base64, URL, HTML, hex, and Unicode encoders/decoders
Regex tester with live highlighting and capture-group inspection
UUID, ULID, NanoID, and cryptographically secure token generators

Frequently asked questions

Are these tools safe for sensitive data like JWTs and API keys?

Yes. Every developer tool runs entirely in your browser — nothing is sent to a server, logged, or stored. Safe for production secrets.

What hash algorithm should I use for passwords?

Never plain SHA. Use bcrypt, scrypt, or Argon2id with a per-user salt. SHA-256/512 are correct for content integrity, not password storage.

How do I decode a JWT to see what's inside?

Paste the token into JWT Decoder. We show the header, payload, signature, expiration date, and warn if the token is expired or uses 'none' algorithm.

Does the JWT decoder verify the signature?

Yes — paste the secret (HS256/384/512) or public key (RS/ES/PS) and we verify the signature locally without sending the token anywhere.

What's the difference between Base64 and Base64URL?

Base64URL replaces + with -, / with _, and omits padding — safe to use in URLs, JWTs, and filenames. Both encoders are available.

How big can my JSON input be?

JSON Formatter handles files up to ~50 MB comfortably. For larger files, switch to streaming mode or use the minifier first.

Can I query a JSON document with JSONPath or jq?

Yes — the JSON Formatter supports both. Try '$.users[?(@.active)].name' to extract names of active users.

How do I generate a UUID v4 or v7?

UUID Generator produces v1 (timestamp), v4 (random), and v7 (sortable timestamp). Bulk generation is supported up to 10,000 IDs per run.

What's a secure way to generate API tokens or passwords?

Token Generator uses the browser's CSPRNG (crypto.getRandomValues) and supports custom alphabets, lengths, and encodings — safe for production secrets.

Why does my regex match differently in different languages?

Regex flavors vary — JavaScript, PCRE, .NET, Python all differ. Our Regex Tester uses JavaScript flavor; toggle 'PCRE compatibility' for Perl-style patterns.

Can I test regex with multiline input?

Yes — set the 'm' (multiline) flag so ^ and $ match per line, and 's' (dotall) so . matches newlines.

How do I convert a string to/from hexadecimal?

Hex Encoder/Decoder handles UTF-8, UTF-16, and binary — paste text or a hex string and click convert.

What's the difference between encodeURI and encodeURIComponent?

encodeURI preserves URL characters (:/?#); encodeURIComponent encodes everything for use as a query value. Our URL Encoder offers both.

Can I format and validate XML and YAML too?

Yes — XML Formatter, YAML Formatter, and TOML Formatter are available with schema validation and conversion between formats.

Are the developer tools really free for production use?

Yes. No signup, no rate limits, no telemetry on inputs. Use them in CI scripts, internal tooling, and production debugging without restriction.