SELF-HOSTED TOOLBOX
Useful transformations, without sending your data away.
Most operations stay entirely in your browser. Password KDFs that need native bcrypt/Argon2/scrypt use the same-origin PHP runtime and are never persisted.
Rename
Build transformations, inspect every result, then download a ZIP containing the original bytes under their new names.
Transform
Live preview
Old → new. Files themselves are untouched.
| # | Original | Result | Size |
|---|
Diff studio
Compare plain text or normalized JSON, YAML, and XML, with line and word-level changes.
Left
Right
Result
Data workbench
Validate, format, minify, convert, inspect, search, and query JSON, YAML, and XML locally.
Input
Output —
Convert
YAML parser is deliberately safe and conservative: no tags, anchors, aliases, or executable constructors.
Tree view
JSONPath
Basic $, .key, ['key'], [n], [*], and ..key syntax.
Encoding toolbox
Text codecs, utility generators, JWT inspection, timestamps, and local file Base64.
Text
Generators & time
UUID / GUID batch generator
Cryptographically random UUID v4 or time-ordered UUID v7, generated entirely in this browser.
JWT decoder
Decode onlyDecoding a JWT does not verify its signature, authenticity, issuer, audience, or expiry. No secret is requested or transmitted.
File Base64
No uploadNo file selected.
Hash
Chunked, cancellable file hashing in a Web Worker. File bytes never go to PHP.
Algorithms
Results
| # | File | Progress | Hashes | Verify |
|---|
Text hash & HMAC
Hash text/bytes or calculate keyed HMAC values locally.
QR studio
Generate QR codes locally as PNG or SVG, and decode supported images without opening their contents.
Content
Live preview
Generation supports compact standard QR byte-mode versions 1–10.
Decode image
Nothing is automatically opened or executed.
Password utilities
Generate and verify common password hashes, inspect formats, create strong passwords/passphrases, salts, and Apache htpasswd entries.
password-api.php on this same host because PHP/libsodium provides hardened native implementations. Passwords are not logged or stored by the application.Password hash generator
Salt is sometimes called a “nonce” by compatibility tooling; password KDF terminology normally calls it a salt.
Parallelism is shown explicitly but fixed at p=1 by the PHP/libsodium API used for custom-salt Argon2id.
bcrypt only considers the first 72 UTF-8 bytes of a password. The tool warns before hashing longer input.
Uses PHP libsodium’s scryptsalsa208sha256 primitive. The encoded LumaForge format stores the exact operation/memory limits needed for verification.
Password verifier & hash inspector
Recognizes bcrypt, Argon2id, this suite’s PBKDF2/scrypt formats, and Apache username:hash lines.
Secure password & passphrase generator
Browser-localSalt, byte-length & htpasswd helpers
Browser-local except bcryptCron helper
Build, validate, explain, and preview standard five-field Unix/Vixie cron expressions without contacting a server.
Expression
Five-field builder
Supports *, lists, ranges, steps, month/day names, and Vixie’s OR semantics when both day-of-month and day-of-week are restricted.
Next executions
| # | Execution time | ISO 8601 |
|---|
Permissions calculator
Convert numeric and symbolic Unix file modes, toggle individual permission bits, inspect special bits, and calculate umask effects.
Mode converter
Interpretation
Umask calculator
IP / CIDR calculator
Normalize IPv4/IPv6 CIDRs, calculate network ranges and masks, and test whether another address belongs to the subnet.
Subnet input
Calculated network
Address ↔ integer converter
TOTP / HOTP inspector
Generate and inspect RFC-style one-time passwords locally. Secrets never leave the browser.
Secret & parameters
Current code
otpauth URI builder
The URI is displayed as text only. It is never opened automatically.