Nine text tools that you probably do on a site covered in adverts. This one runs entirely in your browser, so you can paste the real thing.
JSON — format, minify or sort the keys, with errors that point at the exact line and column instead of "unexpected token at position 412".
JWT — decode a token and see what's in it, plus when it was issued and when it expires, in plain language. The signature is deliberately NOT checked, because verifying one means handing over your secret.
DIFF — line-by-line comparison of two texts, with a count of what was added and removed.
BASE64 — encode or decode, detects which you meant, and handles the URL-safe variant.
HASH — SHA-1, SHA-256, SHA-384, SHA-512 and CRC32.
TIMESTAMP — epoch seconds or milliseconds to ISO, UTC, your local time and "three hours ago", and back again.
TEXT & LISTS — sort (numbers in numeric order, not alphabetical), remove duplicates, change case six ways, trim, and a proper word and character count with reading time.
URL — pull a URL apart into scheme, host, port, path and a readable table of query parameters, or encode and decode.
UUID & RANDOM — version 4 identifiers, hex keys, and passwords generated with your browser's cryptographic generator, with lookalike characters left out so they can be read aloud.
WHY IT MATTERS HERE A JWT is a live credential. An API response is often somebody's personal data. People paste both into advert-supported websites every day without thinking about where it goes. Nothing here leaves the page — there is no server to send it to, and this sandbox blocks outgoing requests entirely, which you can confirm in your browser's network tab.
Free, no sign-up, no ads, no character limits, no "upgrade to process more".
Loading…