Free tools for developers
UUID generators, JSON formatters, JWT decoders and more — fast, free, and 100% private. Every tool runs locally in your browser; your data never touches a server.
Search tools
Search for a developer tool
Popular categories
Encoding
16 toolsThe most-searched category on DevTools Hub — URL encoding, decoding, and Base64 conversions.
JWT
8 toolsThe single biggest source of search traffic — decoding claims, checking expiration, and JWT security.
Regex
6 toolsTesting and building JavaScript regular expressions without leaving the browser.
Date & Time
5 toolsCron expressions, timestamps, and timezones — the format everyone has to decode eventually.
Toolkits
Generators Toolkit
4 toolsIndependent tools for the test data every project eventually needs — unique IDs, strong passwords, placeholder text — plus a way to check the strength of a password you already have. All run entirely in your browser.
JSON Toolkit
10 toolsFormat, validate, diff, minify, convert, query, and schema-generate/validate JSON — ten tools for the format everything speaks. All run entirely in your browser.
Encoding Toolkit
16 toolsBase64, URL, HTML, hex, and ASCII encoding and decoding, plus query string and full URL parsing, building, inspection, Unicode analysis, and string-literal escaping — sixteen tools for the encodings that show up constantly in web development. All run entirely in your browser.
Date & Time Toolkit
5 toolsTimestamps, timezones, and cron schedules — five tools for the two date-and-time problems every backend eventually runs into. All run entirely in your browser.
JWT Toolkit
8 toolsEverything for working with JSON Web Tokens, in one place — decode, understand, verify, build, and secure them. All eight tools run entirely in your browser; nothing you paste is ever sent anywhere.
Hashing Toolkit
8 toolsMD5, SHA, checksums, HMAC, and password hashing — eight tools for hashing text, verifying files, and signing messages. All run entirely in your browser.
Regex Toolkit
6 toolsBuild, test, visualize, debug, and escape for JavaScript regular expressions — six tools covering the whole regex workflow. All run entirely in your browser.
SQL Toolkit
6 toolsFormat, validate, minify, diff, index-advise, and explain SQL — six tools covering readability, correctness, schema changes, and performance. All run entirely in your browser.
OpenAPI Toolkit
5 toolsView, validate, diff, and put an OpenAPI/Swagger document to work — five tools covering the full spec lifecycle. All run entirely in your browser.
Docker Toolkit
5 toolsValidate, lint, format, and visualize Docker Compose files and Dockerfiles — five tools covering the whole Docker workflow. All run entirely in your browser.
GitHub Actions Toolkit
4 toolsValidate, visualize, lint, and audit secrets in GitHub Actions workflows — four tools covering correctness and security. All run entirely in your browser.
Environment Toolkit
4 toolsValidate, diff, and convert .env files — four tools for the dotenv format's real parsing rules and the gotchas that fail silently. All run entirely in your browser.
Kubernetes Toolkit
7 toolsValidate, format, calculate resources, diff, explore relationships, and merge or compare Helm values for Kubernetes manifests — seven tools covering correctness, readability, and resource planning. All run entirely in your browser.
YAML Toolkit
2 toolsValidate and format YAML — syntax errors, duplicate keys, parser-version gotchas, and consistent indentation — schema-agnostic, for any YAML file. All run entirely in your browser.
AWS Toolkit
5 toolsParse ARNs, build and review IAM policies, look up Regions, and validate CloudFormation templates — five tools for everyday AWS work. All run entirely in your browser.
GraphQL Toolkit
2 toolsFormat and validate GraphQL queries, mutations, and SDL schemas with the real reference parser. All run entirely in your browser.
Latest tools
Regex Escape
Escape special regex metacharacters so a literal string can be safely embedded in a pattern.
SQL Index Advisor
Suggest candidate indexes from a query's WHERE, JOIN, ORDER BY, and GROUP BY clauses — before you've run it.
SQL Diff
Compare two CREATE TABLE schemas — added, removed, and changed columns and constraints, plus a suggested migration.
Bcrypt Cost Calculator
Benchmark bcrypt cost factors live and find one that hits your target time.
Password Entropy Calculator
Estimate a password's entropy, crack time, and common weak patterns.
JWT Audience Validator
Check a JWT's aud claim against the audience your service expects.
Latest articles
View all postsPBKDF2 Explained
The oldest algorithm in this site's password-hashing coverage, standardized in 2000 and still running WPA2 and iOS/Android keychains today. Its chained-PRF construction, why it doesn't resist GPUs the way Argon2 or scrypt do, and when it's still the right choice.
scrypt Explained
The first widely-adopted memory-hard password hashing algorithm, built by Colin Percival for his own Tarsnap backup service in 2009 — its three-phase construction, the ROMix memory-hard core, and why its N parameter couples memory and time in a way Argon2 deliberately doesn't.
How to Escape Special Characters in Regex
Why an unescaped user-supplied search term silently matches more than it should, the classic metacharacter-only escaping approach, and the more aggressive algorithm behind JavaScript's native ES2026 RegExp.escape() — verified against MDN's documented examples.