Text Toolbox

Paste response headers to check Content-Security-Policy, Strict-Transport-Security, CORS and cookie attributes; no live request is made.

Beautifies XML and flags syntax errors immediately, processing the text locally.

Looks through snippets, log output or environment files for leaked credentials and masks what it finds, all in the page.

Parses and validates .env files, finds duplicate keys and secrets, compares environments and converts to JSON or YAML.

Converts Base64 text into hexadecimal bytes, locally.

Produces strong passwords or word-based passphrases, several at once, using the browser's secure random source.