toolhq.io
Browse
68 utilities for developers and designers. Search by name or filter by category. Most run in your browser; network tools say where data goes.
Format, validate, and minify JSON with clear error messages and line numbers.
Convert numbers between binary, octal, decimal, and hexadecimal instantly.
Convert JSON to CSV and CSV to JSON, with quoted fields and nested values handled.
Build Unix file permissions visually and get the octal and symbolic notation for chmod.
Convert YAML to JSON and JSON to YAML instantly in your browser.
Convert JSON to TOML and TOML to JSON instantly in your browser.
Format and beautify SQL queries with dialect and keyword case options.
Generate TypeScript interfaces from a JSON sample, with nested types.
Format, indent, and minify XML in your browser with clear structure.
Convert text to and from Base64 with correct UTF-8 handling and a URL safe option.
Generate SHA-1, SHA-256, SHA-384, and SHA-512 hashes of any text, live as you type.
Escape text for safe use in HTML, or decode entities like & back to readable characters.
Compute HMAC-SHA256, SHA-1, or SHA-512 signatures from a message and secret key.
Encrypt text with a password using AES-256-GCM, and decrypt it back. Real encryption, fully in your browser.
Convert an image to a Base64 data URI and back, without uploading the file.
Generate v4 UUIDs in bulk and secure random tokens with custom length and character sets.
Build cron expressions from presets, see them explained in plain English, and preview the next run times.
Generate placeholder text by the paragraph, sentence, or word, ready to paste into any design or layout.
Check how strong a password really is: entropy, character variety, and estimated time to crack.
Generate time based one time passwords (TOTP) from a secret key, the same codes your authenticator app shows.
Generate a QR code from text or a URL, entirely in your browser, and download it.
Test regular expressions against sample text with live match highlighting and capture groups.
Convert text between camelCase, snake_case, kebab-case, Title Case, and generate URL slugs.
Compare two blocks of text line by line and see exactly what was added, removed, or unchanged.
Count characters, words, sentences, and paragraphs, with reading time and word frequency.
Write Markdown and see the rendered result and HTML, live in your browser.
Decode JWT headers and payloads, inspect claims, and check expiry. Decode only, nothing is sent anywhere.
Parse any user agent string into browser, engine, OS, device, and CPU details.
Send REST requests from your browser, import or copy as cURL, and inspect the status, headers, timing, and response body.
Get a unique URL, point a webhook at it, and inspect every request it receives in real time.
Encode and decode URL components, and break any URL into protocol, host, path, and query parameters.
Convert Unix timestamps to readable dates and back, with a live current timestamp and timezone support.
Searchable reference of every HTTP status code with what it means and when to use it.
Find the right MIME type for any file extension, or look up which extensions a MIME type covers.
Enter an IP and CIDR prefix to get the network address, broadcast, host range, and subnet mask.
See your public IP address and look up location, ISP, and timezone details for any IP.
Check whether an IP address is a VPN, proxy, Tor exit, or datacenter, with the signals behind the verdict.
Fill in your page details and get the complete Open Graph and Twitter card meta tags, ready to paste.
Fetch a URL from the server, follow redirects, and inspect response and security headers.
Generate nginx server blocks for reverse proxy, static sites, SSL, load balancing, and WebSockets.
Generate VPN configs with config file, plain text summary, and QR code for WireGuard, OpenVPN, IKEv2, and more.
Look up a domain's mail (MX) servers in priority order, with their IP addresses.
Query A, AAAA, MX, TXT, NS, SOA, CNAME, and CAA records for any domain.
Check whether a DNS record has propagated by querying it against multiple public resolvers at once.
Check an IP address or domain against major email DNS blacklists (DNSBLs).
Check a domain's SPF, DKIM, and DMARC records plus its MX, with plain-English notes.
Trace the delivery path, read SPF, DKIM, and DMARC verdicts, and spot spoofing signs in raw email headers. Parsed entirely in your browser.
Read DMARC aggregate XML reports in your browser. Upload the .xml, .gz, or .zip attachment and see who passes and fails.
Look up PTR records for an IP address and see the associated hostnames.
Look up domain registration dates, registrar, nameservers, and status via RDAP.
Build a valid SPF TXT record from includes, IP addresses, and an all mechanism.
Build a DMARC TXT record for _dmarc with policy, reporting, and alignment options.
Generate an RSA key pair and DKIM DNS TXT record locally in your browser.
Look up a domain's BIMI TXT record for brand logo and authority evidence URLs.
Inspect a host's TLS certificate chain, expiry, trust, protocol, and hostname match.
Paste a PEM certificate or CSR and read subject, issuer, validity, SANs, and fingerprints locally.
Check whether a PEM private key matches a certificate. The key never leaves your browser.
Verify that a CA certificate signed an end-entity certificate. Parsed locally in your browser.
Generate an RSA private key and certificate signing request (CSR) locally in your browser.
Convert RSA private and public keys between PKCS#1, PKCS#8, SPKI, and DER base64 locally.
Check TLS certificates for up to 20 hostnames at once and compare expiry and trust.
Search public Certificate Transparency logs for certificates issued to a domain.
Convert PEM certificates and keys to PKCS#12 or PKCS#7, or extract PEM from a PKCS#12 file locally.
Query the OCSP responder listed in a certificate to see if it is good, revoked, or unknown.
Look up common DNS domain control validation records used during certificate issuance.
Convert between HEX, RGB, and HSL, and check WCAG contrast for any two colors.
Build linear and radial CSS gradients visually and copy the code.
Design CSS cubic-bezier easing curves visually and copy the value.