DevTools Hub

Free tools for developers

UUID generators, JSON formatters, JWT decoders and more — fast, free, and 100% private. Every tool runs locally in your browser; your data never touches a server.

Search tools

Search for a developer tool

Toolkits

Generators Toolkit

3 tools

Independent tools for the test data every project eventually needs — unique IDs and placeholder text. All run entirely in your browser.

JSON Toolkit

10 tools

Format, validate, diff, minify, convert, query, and schema-generate/validate JSON — ten tools for the format everything speaks. All run entirely in your browser.

Encoding Toolkit

16 tools

Base64, URL, HTML, hex, and ASCII encoding and decoding, plus query string and full URL parsing, building, inspection, Unicode analysis, and string-literal escaping — sixteen tools for the encodings that show up constantly in web development. All run entirely in your browser.

Date & Time Toolkit

5 tools

Timestamps, timezones, and cron schedules — five tools for the two date-and-time problems every backend eventually runs into. All run entirely in your browser.

JWT Toolkit

8 tools

Everything for working with JSON Web Tokens, in one place — decode, understand, verify, build, and secure them. All eight tools run entirely in your browser; nothing you paste is ever sent anywhere.

Hashing Toolkit

10 tools

MD5, SHA, checksums, HMAC, and password hashing — ten tools for hashing text, verifying files, and signing messages. All run entirely in your browser.

Regex Toolkit

6 tools

Build, test, visualize, debug, and escape for JavaScript regular expressions — six tools covering the whole regex workflow. All run entirely in your browser.

SQL Toolkit

6 tools

Format, validate, minify, diff, index-advise, and explain SQL — six tools covering readability, correctness, schema changes, and performance. All run entirely in your browser.

OpenAPI Toolkit

5 tools

View, validate, diff, and put an OpenAPI/Swagger document to work — five tools covering the full spec lifecycle. All run entirely in your browser.

Docker Toolkit

7 tools

Validate, lint, format, visualize, merge, and resolve Docker Compose files, and lint Dockerfiles — seven tools covering the whole Docker workflow. All run entirely in your browser.

GitHub Actions Toolkit

4 tools

Validate, visualize, lint, and audit secrets in GitHub Actions workflows — four tools covering correctness and security. All run entirely in your browser.

Environment Toolkit

5 tools

Validate, diff, resolve, and convert .env files — five tools for the dotenv format's real parsing rules and the gotchas that fail silently. All run entirely in your browser.

Kubernetes Toolkit

7 tools

Validate, format, calculate resources, diff, explore relationships, and merge or compare Helm values for Kubernetes manifests — seven tools covering correctness, readability, and resource planning. All run entirely in your browser.

YAML Toolkit

2 tools

Validate and format YAML — syntax errors, duplicate keys, parser-version gotchas, and consistent indentation — schema-agnostic, for any YAML file. All run entirely in your browser.

AWS Toolkit

10 tools

Parse and build ARNs, generate, review, simulate, and minify IAM policies, validate tag policies, look up Regions, and validate CloudFormation templates — nine tools for everyday AWS work. All run entirely in your browser.

GraphQL Toolkit

2 tools

Format and validate GraphQL queries, mutations, and SDL schemas with the real reference parser. All run entirely in your browser.

Algorithms Toolkit

8 tools

Computer science fundamentals for practicing engineers — algorithm complexity, performance analysis, and scalability, with interactive tools and practical examples. All run entirely in your browser.

Data Structures Toolkit

4 tools

How the structures underneath every algorithm actually work — arrays, hash tables, trees, and more, visualized step by step. All run entirely in your browser.

Scalability Toolkit

3 tools

The numbers behind systems that hold up under load — caching, capacity, and the metrics worth actually tracking. All run entirely in your browser.

Distributed Systems Toolkit

2 tools

Tools for the problems that show up once a system spans more than one machine — unique IDs, coordination, and consistency. All run entirely in your browser.

Password Security Toolkit

6 tools

Generate a strong password, check the strength of one you already have or estimate one hypothetically, define or validate the policy an organization follows, and grade its storage practices. All run entirely in your browser.

Latest tools

Latest articles

View all posts

How Long Does It Take To Crack A Password?

There's no single answer — a top-breached password like "password123" is cracked in seconds by dictionary lookup, while a truly random 16-character password can outlast the universe, under the exact same word "crack." What actually decides the answer: whether it's already on a breach list, where the attack happens (online, offline against a fast hash, or offline against a slow hash), and how much real randomness it has. Real crack-time numbers across common password styles, and why two 12-character passwords can land centuries apart.

Credential Rotation

Rotating a machine credential — an API key, a database password, a cloud IAM access key, a certificate — isn't a one-step swap. It's a create-new, deploy-alongside-old, verify, then revoke-old sequence, and skipping a step is exactly what turns routine rotation into an outage. The overlap-window pattern, scheduled vs. event-driven rotation, where automation actually handles it, and the mistakes that leave a "rotated" credential still valid.

Password Spraying Explained

Password spraying is the mirror image of credential stuffing: one guessed, never-leaked password tried against every account on a system, one attempt each, paced to slip under the per-account lockout threshold that would stop a classic brute-force attempt. Why per-account lockout alone is structurally blind to it, how the attack is actually paced and targeted (SSO front doors especially), and which defenses — MFA, common-password blocklists, risk-based throttling — actually close it.