Developer Utilities
Six micro-tools in your browser: JSON, Base64, URL encode, hash, color, and Lorem ipsum.
Six developer micro-tools in one page: JSON formatter and validator, Base64 encode/decode, URL encode/decode, hash generator (MD5, SHA-1, SHA-256, SHA-512), color converter (HEX/RGB/HSL/HSV), and Lorem ipsum generator. All run locally in your browser — no input ever leaves the page.
How it works
3-step walkthrough
How it works
3-step walkthrough
- 1
Pick a tab
Six tabs at the top of the panel — JSON, Base64, URL encode, Hash, Color, Lorem ipsum. Each works independently and updates as you type.
- 2
Copy with one click
Every output (formatted JSON, hash digest, color code, Lorem text) has a Copy button. Color tab has clickable color preview.
- 3
No upload
JSON parsing, hashing, encoding, and Lorem generation all run client-side. Pasting an API token to hash it is safe — it never leaves your browser.
Why use Dropvert
Local-first, free, no upload required
Why use Dropvert
Local-first, free, no upload required
- Six tools in one URL — bookmark once instead of finding six separate sites.
- Pure client-side, including SHA hashing (Web Crypto API) and MD5 (spark-md5 library).
- JSON validator inline — error messages tell you exactly which character is wrong.
- Base64 is UTF-8 safe — handles emoji and accents correctly (most online encoders mangle these).
- Color converter shows HEX, RGB, HSL, and HSV side-by-side.
Frequently asked questions
6 answered
Frequently asked questions
6 answered
- Why is MD5 still on this list if it's broken?
- MD5 is cryptographically broken (collision attacks since 2004) and shouldn't be used for password hashing or signature verification. But it's still common as a checksum for file integrity, deduplication, and legacy system compatibility — those non-security uses are still legitimate. SHA-256 is the right choice for any new security-critical use.
- Is the hash generator safe for hashing passwords?
- No. Hashing passwords requires a deliberately slow, memory-hard algorithm like Argon2, scrypt, or bcrypt — not a fast cryptographic hash. Use this tool for file checksums, content fingerprinting, and similar uses; use a dedicated password-hashing library when storing passwords.
- Can I run this offline?
- Yes. The page is a static SPA route — once it's loaded once in your browser, all six tools work without a network connection. No server calls, no analytics that block functionality.
- How big a JSON can the formatter handle?
- A few megabytes is comfortable. The browser's JSON parser is the bottleneck. For very large JSON (10MB+), expect a brief freeze while parsing.
- Why use encodeURIComponent instead of encodeURI?
- encodeURIComponent escapes more characters (including reserved characters like &, ?, /, +) and is the right choice for encoding values destined for query strings or path segments. encodeURI leaves those alone — useful for encoding entire URLs but rarely what you want.
- Are the colors WCAG-checked?
- Not in this tool. Color converter just translates between formats. For accessibility contrast checks, use a dedicated tool like the WebAIM Contrast Checker or a browser extension.
Related tools
3 suggestions
Related tools
3 suggestions