Bamboozvert

Password

Password generation · Hash — everything runs in your browser, nothing is sent anywhere

20
4128
 
  • Strength: -
  • Entropy: - bits
  • Pool: - chars
  • Brute force: -
Options: character sets and symbols
Character sets

-

More options

Look-alikes = I l 1 | O 0 o S 5 Z 2 (removed when checked)

Always includes at least one character from every selected set

Paste as-is into

A tick means no character in the password needs escaping or encoding in that context — it does not test a real connection. The per-context rules come from the official docs (RFC 3986, libpq, SQL).

Editing re-checks instantly — nothing leaves your browser.

How strong is it?
  • Strength: -
  • Entropy: - bits
  • Pool: - chars
  • Length: -
  • Brute force: -
  • Character kinds: -

This is a ceiling: it assumes every character is random. A password built from words or personal patterns is weaker than shown.

Safe to paste as-is into? (says nothing about strength)

A tick means no character in the password needs escaping or encoding in that context — it does not test a real connection. The per-context rules come from the official docs (RFC 3986, libpq, SQL).

Output format
Result (hashing is one-way)
 
Security notes
  • Hash (SHA-1/256/384/512) is one-way — you cannot get the original text back. It only proves two inputs are identical.
  • Base64 is not encryption — it only changes the representation, and anyone holding the string can decode it without a key. Reversible, therefore not secure.
  • To store real user passwords, do not use plain SHA — use bcrypt, scrypt or Argon2 (they add a salt and a tunable cost).
  • Randomness comes from crypto.getRandomValues(), the operating system generator — not Math.random().

Base64

Encode and decode Base64 · UTF-8 (Thai and emoji) — the round trip is verified as you type

Mode

Text → Base64 (UTF-8, Thai and emoji supported)

Result -
 
  • Input bytes: -
  • Format: -
Encoding options
Mode

Pick an image and get its Base64 — the prefix is optional.

PNG · JPEG · GIF · WebP · BMP · ICO · SVG — the file never leaves your browser

Preview -

No image yet — pick a file or paste Base64

  • Type: -
  • Image size: -
  • Base64 size: -
Base64
 
Security notes
  • Base64 is not encryption — it only changes the representation, and anyone holding the string can decode it without a key. Reversible, therefore not secure.

Image resize

Resize or enlarge an image right here in the browser — in pixels or by percentage — then download it.

PNG · JPEG · GIF · WebP · BMP · ICO · SVG — the file never leaves your browser

Result -

Choose an image to see the resized result here

  • Source: -
  • Target: -
  • File size: -
Security notes
  • Everything runs in your browser — the image is never uploaded anywhere. JPEG has no transparency, so transparent areas are filled with white.

PDF ↔ Image

Convert PDF pages to images, or combine images into a PDF — locally in your browser.

Choose a file to begin

Image highlight

Draw boxes, circles and highlights on an image.

PNG · JPEG · GIF · WebP · BMP · ICO · SVG — the file never leaves your browser

Annotate -

Choose an image to draw on here

  • Source: -
  • Now: -
  • Steps: -
Security notes
  • Everything runs in your browser — nothing you type or paste is uploaded anywhere.

Encrypt

Encrypt and decrypt text with a passphrase you type — AES-256-GCM, all inside your browser.

Mode

Type the text and a passphrase.

The passphrase is never stored and never sent anywhere.

Result -
 
  • Characters in: -
  • Encrypted size: -
  • Round trip: -
  • Scheme: AES-256-GCM · PBKDF2-SHA256 210,000
Security notes
  • This is real encryption — AES-256-GCM with a key derived from your passphrase.

Keys

RSA or ECDSA.

Generate a key pair

Format
-
Public key
 
Private key
 

Use a key

Encrypt, decrypt, sign or verify.

Operation
-
Result
 
Security notes
  • Test keys only.
  • Everything runs in your browser.

JSON

View, validate and edit JSON — format it, minify it, and see the structure as a tree.

-
Indent
Structure

Valid JSON shows up here as a tree you can fold

  • Objects: -
  • Arrays: -
  • Keys: -
  • Max depth: -
  • Output size: -
Security notes
  • Everything runs in your browser — the file is never uploaded.

UUID / ULID

Generate UUID v4 or time-ordered ULIDs.

ID kind

Random 128-bit IDs.

IDs -
    Security notes
    • Randomness comes from crypto.getRandomValues().

    Timestamp

    Convert between epoch and ISO dates.

    ISO (UTC): -
    • Local: -
    • Epoch (sec): -
    • Epoch (ms): -
    • Relative: -
    Security notes
    • Everything runs in your browser — nothing you type or paste is uploaded anywhere.

    URL

    Percent-encode and decode URLs.

    Mode
    Scope
    Result -
     
    Query parameters
      Security notes
      • Everything runs in your browser — nothing you type or paste is uploaded anywhere.

      Text diff

      Compare two texts line by line.

      Differences -
      • added -
      • removed -
      • unchanged -
      Security notes
      • Everything runs in your browser — nothing you type or paste is uploaded anywhere.

      Markdown

      Edit Markdown on the left, preview on the right, then export as HTML or print to PDF.

      Files stay on this device. Supports .md, .markdown and .txt up to 1 MB.

      Preview

      Start typing or open a Markdown file to see the preview.

      Opens the print dialog — choose “Save as PDF”.

      Security notes
      • Everything runs in your browser — nothing you type or paste is uploaded anywhere.

      JWT

      Decode a JSON Web Token.

      Header - 
       
      • Algorithm: -
      • Expires: -
      Payload 
       
      Signature (not verified):
       

      Sign a token

      Create a signed token.

      Algorithm
      Signed token
      -
       

      Verify a token

      Recompute the signature.

      Verify a token -

      Security notes
      • Decoding is not verifying.
      • The secret stays in your browser.

      Text tools

      Change text case, clean lines, and inspect text size.

      -
      • Characters: 0
      • Words: 0
      • Lines: 0
      • UTF-8 bytes: 0
      Security notes
      • Everything runs in your browser.

      Regex tester

      Try a regular expression, inspect matches, and preview replacements.

      Matches -
      Enter a pattern and text to see matches.

      Patterns run in this browser. Very complex patterns may take a long time.

      Security notes
      • Everything runs in your browser.

      CSV ↔ JSON

      Convert CSV rows to JSON and JSON records to CSV.

      Direction
      -

      CSV is parsed with quoted fields and escaped quotes. JSON to CSV expects an array of objects.

      Security notes
      • Everything runs in your browser.

      File checksum

      Calculate a SHA-2 checksum for a local file and compare it with a known value.

      Checksum
      -
       

      Files up to 128 MiB are read into memory. The file stays in your browser.

      Security notes
      • Everything runs in your browser.

      Number base

      Convert numbers between bases.

      From base
      Result-
      • Binary: -
      • Octal: -
      • Decimal: -
      • Hex: -
      Text ↔ Hex
      Result
      -
       
      Security notes
      • Everything runs in your browser.

      Color picker

      Convert color formats.

      Screen picking works in Chrome / Edge (Chromium) and in the desktop app.

      Preview: -
      • HEX: -
      • RGB: -
      • HSL: -
      • On white: -
      • On black: -
      Security notes
      • Everything runs in your browser.

      Cron

      Check when a cron schedule runs next.

      Next 5 runs:-
        Security notes
        • Everything runs in your browser.

        YAML ↔ JSON

        Convert YAML and JSON locally in your browser.

        -
        Security notes
        • Everything runs in your browser.

        HTML Preview

        Preview HTML in an isolated frame.

        Preview -

        Scripts and external network requests are blocked. Embedded data images and inline styles are allowed.

        Security notes
        • Scripts and external network requests are blocked.

        Code formatter

        Beautify or minify HTML, CSS, JavaScript, and XML locally.

        -
        Security notes
        • Everything runs in your browser.

        SQL formatter

        Format SQL for a selected database dialect.

        -
        Security notes
        • Everything runs in your browser.

        JSON to Code

        Infer TypeScript or Go types from a JSON sample.

        -
        Security notes
        • Everything runs in your browser.

        HTML to JSX

        Convert HTML markup into React JSX.

        -
        Security notes
        • Everything runs in your browser.