Encoding & Crypto
Encode, decode, hash, and generate secrets. 19 tools
Encoding makes data survive a journey through systems that only accept text — URLs, JSON payloads, HTTP headers, HTML attributes. Hashing does the opposite job, producing a fixed fingerprint you cannot reverse. These tools cover both, plus the generators for passwords, UUIDs and keys.
Worth being clear on one distinction: Base64 and URL encoding are reversible and protect nothing, while hashes are one-way. If you are trying to hide something, neither is encryption.
All 19 encoding & crypto
Base64 Encode/Decode
Encode text to Base64 or decode Base64 back to text.
URL Encode/Decode
Encode or decode strings for safe use in URLs.
HTML Entity Encode/Decode
Escape or unescape HTML entities in text.
Hash Generator
Generate MD5, SHA1, SHA256, and SHA512 hashes of your text.
JWT Decoder
Decode a JSON Web Token's header and payload.
UUID Generator
Generate one or many random UUID v4 identifiers.
Password Generator
Generate strong, random passwords with custom rules.
Hex / Binary / Text Converter
Convert text to and from hexadecimal and binary representations.
Morse Code Translator
Convert text to Morse code and back, with audio playback.
Caesar Cipher / ROT13
Encrypt or decrypt text with a shift cipher, including ROT13.
HMAC Generator
Generate HMAC signatures with a secret key (MD5/SHA1/SHA256/SHA512).
File Hash Checker
Compute SHA-1, SHA-256, and SHA-512 checksums of any file.
Unicode Escape/Unescape
Convert text to \u escape sequences and back.
Base32 Encode/Decode
Encode text to Base32 (RFC 4648) or decode it back.
File to Base64
Convert any file — audio, video, PDF, images — to Base64 or a data URI.
Base64 to File
Decode Base64 back into a downloadable file.
Base64 to Image
Preview and download an image from Base64 or a data URI.
Base64 ⇄ Hex
Convert between Base64 and hexadecimal byte representations.
Text Encrypt / Decrypt
Encrypt text with a passphrase using AES, TripleDES, or Rabbit.
What to know before you pick one
Encoding is not encryption, and hashing is neither
These three get confused constantly and the difference matters. Encoding rewrites data so it survives a journey through systems that only accept plain text — anyone can reverse it, and it protects nothing. Hashing produces a fixed-length fingerprint that cannot be turned back into the original at all. Encryption is the only one of the three that hides something, and none of the tools on this page do it. If you Base64 a password to keep it secret, it is not secret.
Why Base64 makes files bigger
Base64 represents every three bytes using four characters, so anything encoded this way grows by roughly a third. That is the price of being safe to paste into JSON, an email header or a data URL. It is worth knowing before embedding a large image into a stylesheet or a payload: the file you send is meaningfully larger than the file you started with.
URL encoding depends on where in the URL you are
The same character is legal in one part of a URL and must be escaped in another. A slash is meaningful in a path and merely data in a query string; a plus sign means a space in a query and means a plus in a path. This is why a link can work when typed and break when built by joining strings together, and why encoding the whole URL at once usually produces something worse than encoding each part.
A hash tells you two files differ, not how
Change one byte and the entire hash changes, which is exactly what makes it useful for verifying that a download arrived intact or that a value has not been altered. It also means a hash can never tell you what changed or by how much. For that you want a difference check on the content itself.
What makes a generated password actually strong
Length does more work than complexity. A long passphrase of ordinary words is harder to attack than a short string of symbols, and far easier to type correctly. The generators here run in your browser using the operating system’s own source of randomness, so nothing generated is transmitted or stored — which matters, because a password that has travelled over a network to reach you has already had a life you cannot audit.