# SpotCanary > Free, privacy-first online tools that run entirely in the browser — nothing is uploaded, no signup, no tracking of content. ## Tools - [Advanced Base64 Encoder / Decoder](https://spotcanary.com/tools/base64.html): Encode or decode Base64 instantly — text, files and images with live preview. Free, no limits, fully private: nothing is ever uploaded to a server. > This is a Base64 encoding tool that runs entirely client-side in your browser, ensuring that no data or files are ever sent to a server. It utilizes binary-to-text encoding schemes to represent binary data as ASCII strings, which is essential for storing and transferring binary information across media designed for textual data. - [Advanced Password Generator](https://spotcanary.com/tools/16-character-password-generator.html): Free online Advanced Password Generator. Runs entirely in your browser — your data is never uploaded to a server. 100% private and instant. > This free advanced password generator runs entirely in your browser; your data is never sent to any server. A secure password generator creates random, complex strings of characters that are mathematically almost impossible to crack using brute-force attacks. - [Advanced Password Generator](https://spotcanary.com/tools/24-character-password-generator.html): Free online Advanced Password Generator. Runs entirely in your browser — your data is never uploaded to a server. 100% private and instant. > This free advanced password generator runs entirely in your browser; your data is never sent to any server. A secure password generator creates random, complex strings of characters that are mathematically almost impossible to crack using brute-force attacks. - [Advanced Password Generator](https://spotcanary.com/tools/password-generator.html): Generate cryptographically strong random passwords or memorable passphrases with custom length and symbols. 100% private — created in your browser. > This free advanced password generator runs entirely in your browser; your data is never sent to any server. A secure password generator creates random, complex strings of characters that are mathematically almost impossible to crack using brute-force attacks. - [Advanced Password Generator](https://spotcanary.com/tools/wep-key-generator.html): Free online Advanced Password Generator. Runs entirely in your browser — your data is never uploaded to a server. 100% private and instant. > This free advanced password generator runs entirely in your browser; your data is never sent to any server. A secure password generator creates random, complex strings of characters that are mathematically almost impossible to crack using brute-force attacks. - [Advanced Password Generator](https://spotcanary.com/tools/wifi-password-generator.html): Free online Advanced Password Generator. Runs entirely in your browser — your data is never uploaded to a server. 100% private and instant. > This free advanced password generator runs entirely in your browser; your data is never sent to any server. A secure password generator creates random, complex strings of characters that are mathematically almost impossible to crack using brute-force attacks. - [Advanced Word & Character Counter](https://spotcanary.com/tools/word-counter.html): Count words, characters, sentences and reading time instantly, plus SEO keyword density analysis. Free and private — your text never leaves the browser. > This free advanced word & character counter runs entirely in your browser; your data is never sent to any server. For writers, bloggers, and SEO professionals, knowing your exact word count is crucial for meeting content guidelines. Furthermore, our built-in keyword density analyzer helps ensure your content is perfectly optimized for search engines without "keyword stuffing". - [Automatic Hash Identifier](https://spotcanary.com/tools/hash-identifier.html): Paste any hash to identify its type instantly and get the matching Hashcat mode and John the Ripper format. Free, private, runs entirely in your browser. > This free automatic hash identifier runs entirely in your browser; your data is never sent to any server. A 32-character hexadecimal string could be MD5, NTLM, MD4, or LM. Our tool uses static regex heuristics to analyze the structure, length, and signature of the hash to provide you with the most likely candidates. - [Bcrypt Hash Generator & Verifier](https://spotcanary.com/tools/bcrypt-generator.html): Generate bcrypt hashes with any cost factor and verify passwords against existing hashes. Runs 100% in your browser — secrets never leave your device. > This free bcrypt hash generator & verifier runs entirely in your browser; your data is never sent to any server. It incorporates a salt to protect against rainbow table attacks and is an adaptive function: over time, the iteration count (or work factor) can be increased to make it slower, so it remains resistant to brute-force search attacks even with increasing computation power. - [Bulk UUID / GUID Generator (v4)](https://spotcanary.com/tools/uuid-generator.html): Generate 1 to 5,000 cryptographically secure version-4 UUIDs (GUIDs) instantly. Copy or download the list — free, no sign-up, runs entirely in your browser. > This free bulk uuid / guid generator (v4) runs entirely in your browser; your data is never sent to any server. A UUID is a 128-bit label used for information in computer systems. They are widely used as database primary keys, session IDs, and unique file names. - [CSS Gradient Generator](https://spotcanary.com/tools/gradient-generator.html): Design linear and radial CSS gradients visually and copy the ready-to-use code in one click. Free gradient background maker — no sign-up required. > This free css gradient generator runs entirely in your browser; your data is never sent to any server. By utilizing CSS gradients instead of image files, you can significantly reduce your website's load time and bandwidth usage, while maintaining crisp rendering on high-resolution displays. - [Color Picker & Palette Generator](https://spotcanary.com/tools/color-picker.html): Pick colors and convert between HEX, RGB, HSL and CMYK color spaces instantly. Generate harmonious palettes for your designs — free and in-browser. > This free color picker & palette generator runs entirely in your browser; your data is never sent to any server. It also acts as an automated color scheme generator based on color theory. - [Convert Images to PDF](https://spotcanary.com/tools/images-to-pdf.html): Free online Convert Images to PDF. Runs entirely in your browser — your data is never uploaded to a server. 100% private and instant. > This free convert images to pdf runs entirely in your browser; your data is never sent to any server. This guarantees your files are 100% secure and private. - [Encrypt & Protect PDF](https://spotcanary.com/tools/pdf-protector.html): Protect PDFs with strong AES password encryption directly in your browser. Your documents never leave your device — free, instant and truly private. > This free encrypt & protect pdf runs entirely in your browser; your data is never sent to any server. The file never leaves your computer, making it completely safe to encrypt sensitive legal, financial, or personal documents. - [Epoch Converter](https://spotcanary.com/tools/epoch-converter.html): Free epoch converter: turn epoch time into a human-readable date, or any date into epoch seconds or milliseconds. Live current epoch clock included. > Epoch time — also known as Unix time or POSIX time — is the number of seconds that have passed since00:00:00 UTC on 1 January 1970, the "Unix epoch". Because it is a single ever-increasing number, it is the standard way computers store and exchange points in time without worrying about time zones or daylight saving. This free epoch converter runs entirely in your browser, so nothing you type is ever uploaded. - [GUID Generator](https://spotcanary.com/tools/guid-generator.html): Generate cryptographically secure random GUIDs instantly — one or thousands at a time, hyphenated or raw, uppercase for .NET and SQL Server. Free. > AGUID(Globally Unique Identifier) is a 128-bit value used to identify objects with practical uniqueness — no central registry required. It is Microsoft's name for aUUID(Universally Unique Identifier, RFC 4122), and the two terms describe the same thing. This free GUID generator creates cryptographically secure version-4 GUIDs directly on your device usingcrypto.getRandomValues()— nothing is sent to any server. - [Image Cropper & Resizer](https://spotcanary.com/tools/image-cropper.html): Free online Image Cropper & Resizer. Runs entirely in your browser — your data is never uploaded to a server. 100% private and instant. > This free image cropper & resizer runs entirely in your browser; your data is never sent to any server. Simply upload your photo, select your desired aspect ratio, adjust the bounding box, and click download. - [Image Format Converter & Compressor](https://spotcanary.com/tools/image-converter.html): Free online Image Format Converter & Compressor. Runs entirely in your browser — your data is never uploaded to a server. 100% private and instant. > This free image format converter & compressor runs entirely in your browser; your data is never sent to any server. It requires absolutely zero server uploads, saving you bandwidth and guaranteeing total privacy. - [Image to Text Extractor](https://spotcanary.com/tools/ocr-image-to-text.html): Extract text from photos, screenshots and scans with in-browser OCR. Free, unlimited and 100% private — your images are never uploaded anywhere. > This free image to text extractor runs entirely in your browser; your data is never sent to any server. This allows the complex Artificial Intelligence required to "read" text in an image to run entirely inside your browser's memory, using your local CPU/GPU. - [Instant Chart Maker](https://spotcanary.com/tools/chart-maker.html): Turn CSV or JSON data into beautiful bar, line and pie charts in seconds and download them as images. Free chart creator — no sign-up, no watermark. > This free instant chart maker runs entirely in your browser; your data is never sent to any server. Simply paste two columns of CSV data (e.g., Month and Sales), select your preferred chart type (Bar, Line, Pie), and download a high-resolution PNG image. - [JSON Formatter & Validator](https://spotcanary.com/tools/json-formatter.html): Format, validate and minify JSON instantly, with error hints and JSON-to-CSV export. Free and private — your data never leaves your browser. > This free json formatter & validator runs entirely in your browser; your data is never sent to any server. However, raw JSON is often minified (compressed onto a single line) to save bandwidth, making it completely unreadable for humans. Our JSON Formatter instantly "prettifies" this data by adding proper indentation and line breaks, making it easy to read and debug. - [JSON Web Token (JWT) Tool](https://spotcanary.com/tools/jwt-tool.html): Decode JSON Web Tokens, inspect claims, verify signatures and forge test tokens instantly. 100% client-side — your tokens never leave your browser. > This free json web token (jwt) tool runs entirely in your browser; your data is never sent to any server. This information can be verified and trusted because it is digitally signed. JWTs can be signed using a secret (with the HMAC algorithm) or a public/private key pair using RSA or ECDSA. - [JavaScript Obfuscator](https://spotcanary.com/tools/js-obfuscator.html): Obfuscate JavaScript with control-flow flattening, string encryption and dead-code injection. Free and private — your source never leaves your browser. > This free javascript obfuscator runs entirely in your browser; your data is never sent to any server. Obfuscation transforms your readable code into a complex, chaotic format that is incredibly difficult for humans to understand or reverse-engineer, while still functioning exactly the same for the browser. - [Magic Omni-Decoder](https://spotcanary.com/tools/omni-decoder.html): Free online Magic Omni-Decoder. Runs entirely in your browser — your data is never uploaded to a server. 100% private and instant. > This free magic omni-decoder runs entirely in your browser; your data is never sent to any server. It automatically checks against common developer formats: - [Markdown Editor & HTML Preview](https://spotcanary.com/tools/markdown-editor.html): Free online Markdown Editor & HTML Preview. Runs entirely in your browser — your data is never uploaded to a server. 100% private and instant. > This free markdown editor & html preview runs entirely in your browser; your data is never sent to any server. Created by John Gruber in 2004, Markdown is now one of the world's most popular markup languages. Using Markdown is different than using a WYSIWYG editor. In an application like Microsoft Word, you click buttons to format words and phrases, and the changes are visible immediately. Markdown uses standard characters like asterisks (*) and hashes (#) to format text, which is then parsed into HTML. - [PDF Split & Merge Tool](https://spotcanary.com/tools/pdf-tools.html): Free online PDF Split & Merge Tool. Runs entirely in your browser — your data is never uploaded to a server. 100% private and instant. > This free pdf split & merge tool runs entirely in your browser; your data is never sent to any server. This allows your web browser to perform the complex binary manipulation required to edit PDFs directly on your device's memory. - [PDF Text Extractor](https://spotcanary.com/tools/pdf-text-extractor.html): Free online PDF Text Extractor. Runs entirely in your browser — your data is never uploaded to a server. 100% private and instant. > This free pdf text extractor runs entirely in your browser; your data is never sent to any server. Because this all happens locally via client-side JavaScript, your sensitive documents are never transmitted over the internet. - [Professional Online Stopwatch](https://spotcanary.com/tools/stopwatch.html): Free online stopwatch with millisecond accuracy, lap tracking and split times. Works offline in your browser — no ads in your way, no sign-up. > This free professional online stopwatch runs entirely in your browser; your data is never sent to any server. Whether you're timing a sprint, measuring code execution, or tracking productivity intervals, this tool provides millisecond accuracy directly in your browser without requiring any plugins or app downloads. - [Professional QR Code Generator](https://spotcanary.com/tools/qr-generator.html): Create custom QR codes for URLs, WiFi, email and more. Download high-resolution PNGs free — no watermark, no sign-up, and your data never leaves your browser. > This free professional qr code generator runs entirely in your browser; your data is never sent to any server. Our tool allows you to create specialized QR codes for different use cases: - [Regex Tester & Playground](https://spotcanary.com/tools/regex-tester.html): Test regular expressions against your own text with real-time match highlighting and group inspection. Free regex playground — instant and private. > This free regex tester & playground runs entirely in your browser; your data is never sent to any server. Usually such patterns are used by string-searching algorithms for "find" or "find and replace" operations on strings, or for input validation. They are incredibly powerful for parsing log files, validating user input (like emails and passwords), and extracting specific data from large text blocks. - [Text Compare & Diff Checker](https://spotcanary.com/tools/diff-checker.html): Compare two blocks of text or code side by side and see every difference highlighted instantly. Free and 100% private — nothing leaves your browser. > This free text compare & diff checker runs entirely in your browser; your data is never sent to any server. It is an essential utility for programmers reviewing code changes, editors comparing document versions, and anyone trying to spot subtle differences between two files. - [URL Encoder & Decoder](https://spotcanary.com/tools/url-encoder.html): Encode spaces and special characters for URLs (%20) or decode percent-encoded strings back to text. Free, instant and 100% private in your browser. > This free url encoder & decoder runs entirely in your browser; your data is never sent to any server. URLs can only be sent over the Internet using the ASCII character-set. Because URLs often contain characters outside the ASCII set, they have to be converted into a valid format. URL encoding replaces unsafe ASCII characters with a "%" followed by two hexadecimal digits. - [Ultimate Text Case Converter](https://spotcanary.com/tools/case-converter.html): Convert text to UPPERCASE, lowercase, Title Case, camelCase, snake_case and more in one click. Free, instant and private — nothing leaves your browser. > This free ultimate text case converter runs entirely in your browser; your data is never sent to any server. Our Ultimate Text Case Converter allows you to instantly switch between standard writing formats (like Title Case for headings) and programming standards (like camelCase for variables). - [Universal Data Converter](https://spotcanary.com/tools/data-converter.html): Free online Universal Data Converter. Runs entirely in your browser — your data is never uploaded to a server. 100% private and instant. > This free universal data converter runs entirely in your browser; your data is never sent to any server. This means you can convert sensitive customer lists, database dumps, and API payloads without ever transmitting a single byte to an external server. - [Unix Timestamp ⇄ Date Converter](https://spotcanary.com/tools/timestamp-converter.html): Convert Unix timestamps to human-readable dates and dates back to epoch seconds or milliseconds. Live current epoch, every time zone. Free and instant. > This free unix timestamp / epoch converter runs entirely in your browser; your data is never sent to any server. It is defined as the number of seconds that have elapsed since 00:00:00 Coordinated Universal Time (UTC), Thursday, 1 January 1970, minus leap seconds. Every day is treated as if it contains exactly 86400 seconds. - [Video to GIF / MP3 Converter](https://spotcanary.com/tools/video-converter.html): Convert video clips to animated GIFs or extract MP3 audio using FFmpeg in your browser. Free, no upload, no watermark — your files stay on your device. > This free video to gif / mp3 converter runs entirely in your browser; your data is never sent to any server. However, this tool utilizesWebAssembly (WASM)to compile FFmpeg—the industry standard software for video editing—so it can run natively inside your web browser. - [What is my IP Address?](https://spotcanary.com/tools/what-is-my-ip.html): See your public IP address, ISP and approximate location instantly. Quick, free IP lookup with IPv4/IPv6 support — no logging, no sign-up. > This free what is my ip address? runs entirely in your browser; your data is never sent to any server. We use a secure client-side lookup to fetch your IP address information without storing any of your personal data on our servers. - [What is the Pomodoro Technique?](https://spotcanary.com/tools/pomodoro-timer.html): Boost your focus with a free online Pomodoro timer: customizable work sessions, automatic breaks and desktop notifications. No sign-up, no install. > This free what is the pomodoro technique? runs entirely in your browser; your data is never sent to any server. It uses a kitchen timer to break work into intervals, typically 25 minutes in length, separated by short breaks. Each interval is known as a pomodoro, from the Italian word for tomato. - [What time is it in Mumbai?](https://spotcanary.com/tools/time-in-mumbai.html): Free online What time is it in Mumbai?. Runs entirely in your browser — your data is never uploaded to a server. 100% private and instant. > This free what time is it in mumbai? runs entirely in your browser; your data is never sent to any server. It automatically adjusts for Daylight Saving Time (DST) if applicable. - [Word Unjumbler (Advanced)](https://spotcanary.com/tools/word-unjumbler.html): Unscramble any letters instantly: solve anagrams, jumbles, Wordle and Scrabble puzzles with the highest-scoring words. Free, instant, no sign-up needed. > This free word unjumbler (advanced) runs entirely in your browser; your data is never sent to any server. Simply type your jumbled letters into the input box and click "Unscramble Letters". - [World Clocks](https://spotcanary.com/tools/world-clocks.html): See the exact current time in major cities and every time zone worldwide, and compare it with your local time. Free online world clock, always accurate. > Check the exact current time in major cities around the globe. - [YouTube Thumbnail Downloader](https://spotcanary.com/tools/youtube-thumbnail-downloader.html): Download any YouTube video thumbnail in full HD (1080p), SD and HQ with one click. Free, no watermark, no sign-up — grab the cover image instantly. > This free youtube thumbnail downloader runs entirely in your browser; your data is never sent to any server. It is 100% safe, fast, and does not require you to install any questionable browser extensions or software. - [Your Profile](https://spotcanary.com/tools/fitness-calculator.html): Free online Your Profile. Runs entirely in your browser — your data is never uploaded to a server. 100% private and instant. > This free your profile runs entirely in your browser; your data is never sent to any server. - [Your Screen Resolution is](https://spotcanary.com/tools/screen-resolution.html): Instantly check your screen resolution, viewport size, pixel density and device pixel ratio. Free resolution test that works on any device or monitor. > This free your screen resolution is runs entirely in your browser; your data is never sent to any server. A higher resolution means the display can show more details and fit more information on the screen. ## Reference - [Base64 vs Hexadecimal](https://spotcanary.com/glossary/base64-vs-hex.html): A complete comparison between Base64 encoding and Hexadecimal (Hex) encoding. Learn when to use which and how they impact data size. > When working with binary data in software development, you often need to represent that data as readable text. The two most common ways to do this areBase64andHexadecimal (Hex)encoding. But what is the difference, and when should you use each? - [Bcrypt vs MD5](https://spotcanary.com/glossary/bcrypt-vs-md5.html): Why you should never use MD5 for passwords anymore, and why Bcrypt is the industry standard for password hashing. > If you are building a login system, choosing the right hashing algorithm is the most critical security decision you will make. While MD5 was heavily used in the early 2000s, it is now considered completely broken for password storage. Today,Bcryptis the gold standard. - [How Bcrypt Works](https://spotcanary.com/glossary/how-bcrypt-works.html): An in-depth look at Bcrypt password hashing, salt generation, and why it is the gold standard for storing passwords securely. > Bcrypt is a password-hashing function designed by Niels Provos and David Mazières in 1999. Decades later, it remains one of the absolute best ways to securely store user passwords in a database. - [JWT vs Session Cookies](https://spotcanary.com/glossary/jwt-vs-session-cookies.html): Learn the architectural differences between JSON Web Tokens (JWT) and stateful Session Cookies for web authentication. > When authenticating users in a web application, developers generally choose between two primary architectures:Stateful Session CookiesorStateless JSON Web Tokens (JWT). Understanding the difference is key to building scalable apps. - [Unix Epoch Time Explained](https://spotcanary.com/glossary/unix-epoch-time.html): Learn what the Unix timestamp is, why it starts on January 1st, 1970, and how computers keep track of time. > A Unix timestamp (also known as Epoch time or POSIX time) is a system for describing a point in time. It is defined as the number of seconds that have elapsed since00:00:00 Coordinated Universal Time (UTC), Thursday, 1 January 1970, minus leap seconds. - [What is Base64 Encoding?](https://spotcanary.com/glossary/what-is-base64.html): A complete guide to understanding Base64 encoding, how it works, and why it is used in web development and data transmission. > Base64 is a data encoding scheme that converts binary data (like images or compiled code) into a sequence of printable ASCII text characters. ## Languages SpotCanary is fully localized in the following languages. Access them by prefixing the URL path (e.g., `https://spotcanary.com/es/tools/qr-generator.html`): - `en` (English - default) - `de` (German) - `es` (Spanish) - `fr` (French) - `hi` (Hindi) - `id` (Indonesian) - `pt-br` (Portuguese - Brazil) All tools are free and process data locally in the browser.