StringToolsStringTools
client-side: true · telemetry: none

Developer Tools
That Never Phone Home

17 utilities for the things you do a hundred times a week — format a JSON payload, test a regex, diff two files, hash a string, hit an endpoint. Every one runs in your browser, so pasting a production payload or an API key is safe by construction.

Data & Formats

4 tools

Format, validate, and convert between JSON, XML, YAML, and CSV.

Text & Code

5 tools

Regex, diffs, case conversion, Markdown, and word counts.

Security & Encoding

3 tools

Base64, cryptographic hashes, and secure password generation.

Web & APIs

5 tools

Test endpoints, parse URLs, convert timestamps, and pick colors.

$ curl —

Safe to paste into

No request ever carries your input off the page, so a production payload, a JWT, or a customer CSV is as safe here as in your own editor. Open DevTools and check the network tab — that is the whole argument.

auth: null

No account, no limits

There is no free tier that runs out at five conversions, no watermark, and no email wall. Bookmark a tool and it behaves identically on the hundredth use as the first.

/** docs */

Documented, not guessed

Each tool ships with a reference guide — the JSON parse-error decoder, a regex cheat sheet that actually compiles, hash algorithms marked broken or safe, and HTTP status codes in plain English.

Free developer tools that run entirely in your browser

Every developer keeps a scratch folder of half-remembered utilities: the site that pretty-prints JSON, the one that tests a regular expression, the one that decodes a JWT so you can see what the backend actually put in it. The trouble is that most of them send your input to a server to do the work. That is fine for a toy example and genuinely dangerous for a real payload, because a bearer token pasted into a “free online decoder” is a token you have to rotate.

These 17tools do the processing in the page itself. There is no API behind them and no request carrying your data anywhere — which you can verify in about ten seconds with your browser’s network tab. That single design choice is what makes it reasonable to paste a production response into the JSON formatter, drop a config into the YAML converter, or run a real string through the hash generator.

The set covers the everyday loop rather than trying to be exhaustive: converting between JSON, XML, YAML and CSV; testing regular expressions with live match highlighting; comparing two blocks of text with a real diff algorithm; encoding and decoding Base64; generating MD5 through SHA-512; building secure passwords; and calling REST endpoints from an in-browser API client when you do not want to open Postman for one request.

Each page also carries a written reference — the kind of thing you would otherwise go hunting for on Stack Overflow. If you came looking for a calculator or a file tool instead, the everyday tools are on the home page.