25 Free Tools
Browser-based utilities that run entirely on your device. Nothing is sent to our servers. No sign-up, no software, no cost.
25 free tools
The tools on this page are built as client-side JavaScript. When you generate a QR code, format JSON, or create a password, the work happens in your browser — the data never travels to a server, because there is no server involved in the computation at all.
That is not a marketing claim you have to take on faith. Load any tool on this page, turn off your internet connection, and use it. It still works. That is the whole test, and it is the reason these tools are appropriate for data you would not want to paste into a random website: API responses, internal documents, passwords, and customer information.
| Task | Tool | What to know |
|---|---|---|
| Share a link, WiFi login, or contact card | QR Code Generator | Higher error correction survives damage but holds less data |
| Label retail or inventory items | Barcode Generator | EAN-13 and UPC-A are for retail; Code 128 for internal use |
| Create a secure password | Password Generator | Length beats complexity — 16+ characters matters more than symbols |
| Read a messy API response | JSON Formatter | Validates structure and reports the exact character position of errors |
| Check a writing assignment | Word Counter | Also gives reading time and character counts with and without spaces |
| Work out what grade you need | Grade Calculator | Handles weighted categories, which is where most people go wrong |
| Pick a fair winner | Random Name Picker | Uses the browser's cryptographic RNG, not a seeded pseudo-random one |
A 12-character password drawn from the full printable set has around 78 bits of entropy. Adding four more characters takes it past 100 bits, which puts brute-force attack well beyond practical reach. Substituting @ for a in a dictionary word adds almost nothing, because cracking tools have applied those substitutions since the 1990s. Length and genuine randomness are what count — which is why our generator defaults to length rather than symbol soup.
QR codes come in four error-correction levels, from L (recovers about 7% damage) to H (about 30%). Higher correction means the same data needs a physically denser code, so for a printed sign that may get scuffed, choose H and keep the URL short. For a clean on-screen code, L or M scans faster and prints smaller.
EAN-13 and UPC-A codes used in shops must be registered through GS1 — you cannot invent your own and expect a retailer to accept it. For internal inventory, warehouse, or asset tracking, Code 128 is unrestricted, encodes any ASCII text, and is what most internal systems use.
The pickers and generators here use crypto.getRandomValues(), the browser's cryptographically secure random source, rather than Math.random(). For a giveaway or a classroom draw the difference is academic, but it means results are genuinely unpredictable rather than reproducible from a seed.
Do QR codes generated here expire?
No. A QR code is just an encoding of the text or URL you typed — there is no redirect service, no tracking layer, and no account behind it. The code will scan correctly forever. The only way it stops working is if the destination URL itself goes offline.
Is it safe to generate passwords in a browser?
For this tool, yes, because generation happens locally using the browser's cryptographic random number generator and the result is never transmitted. The genuine risk with any password generator is what happens next: paste it straight into a password manager rather than emailing it to yourself or saving it in a text file.
Can I use these barcodes on products I sell in stores?
Only if the number is registered to you through GS1. Retail scanners look up EAN-13 and UPC-A codes in a shared global database, so an unregistered number will either fail or resolve to someone else's product. Code 128 has no such restriction and is fine for internal labelling.
Does the JSON formatter send my data anywhere?
No. Parsing and formatting happen entirely in your browser. This is the main reason to use a client-side formatter for API responses or configuration files — pasting internal data into a server-side tool means handing it to a third party.
How accurate is the download speed test?
It measures actual throughput to a test endpoint, so it reflects real conditions at that moment. Results vary with WiFi signal strength, network congestion, VPN use, and other devices on your connection. Run it two or three times and take the best result for a fair reading of your line.
Is the random name picker genuinely fair?
Yes. It uses the browser's cryptographic random source and every remaining entry has an equal probability on each draw. There is no weighting, no seed you could reverse-engineer, and no way to influence which name comes up.
Browse Other Categories