Free tools · No signup · Works in your browser

Small tools.
Big vibes.

A tiny workshop of fast, focused utilities built by one person who got fed up with bloated SaaS. No accounts, no paywalls, no "sign up for free!" popups that definitely aren't free. Just tools, doing tool things.

Browse the toolshed Read the blog

60 tools live · still expanding No cookies. No trackers.

this is Tooly. say hi.

The toolshed.

60 / 60 live

01 · IMAGE ● Live

Image Smusher.

Batch-compress PNG, JPG, and WebP images until they're tiny and polite. Quality slider, optional resize, EXIF stripping. Handles 50 files at once without breaking a sweat. Your images never leave your browser.

image batch client-side

Open the smusher

02 · IMAGE ● Live

HEIC Unheicer.

Turns iPhone HEIC photos into PNGs or JPGs that the rest of the internet can actually open. Drag in up to 50 files. Works offline after first load. Zero iCloud involvement.

heic iphone converter

Unheic something

03 · DEV ● Live

JSON Fixer.

Format, minify, sort keys, and validate JSON. Tree view for spelunking. Keyboard shortcuts for the keyboard people. Catches most of the common errors and tells you exactly where they are.

Drop an image, get a color palette. Exports as CSS variables, SCSS, Tailwind config, Figma tokens, or plain JSON. The color names are generated from the actual colors. They are sometimes correct.

Make SVG files small without making them look bad. Strips editor metadata, rounds coordinates, removes useless attributes. See the byte count drop in real time. Side-by-side visual check. Satisfying.

Write a regex, see matches highlighted live, and get a plain-English explanation of what every piece of it actually does. Handles the escapes, the lookarounds, the weird character classes. Find-and-replace mode too.

QR codes for URLs, WiFi credentials, contacts, emails, SMS, or just text. Customize the colors, drop a logo in the middle, download PNG or SVG. The WiFi password never goes anywhere near our server.

Drop one image, get every favicon size you need — 16, 32, 48, 180, 192, 512 — plus a multi-resolution .ico and the HTML snippet for your head. One ZIP, one minute. Then never think about favicons again.

Paste two versions of anything — code, prose, config, logs — and see exactly what changed. Line-by-line with word-level highlights. Split or unified view. Export as a standard unified patch.

Convert between JSON, YAML, TOML, CSV, TSV, XML, Markdown tables, HTML tables, and SQL INSERT statements. Any format to any other. Type coercion, handles nested data, gets the quoting right. 72 directions, one tool.

Paste any timestamp — Unix epoch (seconds or milliseconds), ISO 8601, RFC 2822, or almost any human-readable date — and see every other representation at once. Timezone-aware, DST-correct, live clock. Math, diffs, copy-per-row.

Stitch images into PDFs, or slice PDFs back into images. Drag, drop, reorder, download. Client-side, 50 MB cap, honest about what it can't do. Word docs stay on your Word.

Paste broken JSON. Get fixed JSON back. Trailing commas, unquoted keys, Python-style True, truncated payloads — it fixes what's safe, refuses what isn't, and tells you every change it made.

Describe a pattern in English, get a regex back — with test cases and explanation. On-device AI via Chrome's built-in Prompt API or WebGPU fallback. No upload, no server.

Paste any cron expression, get plain-English meaning plus the next 5 trigger times. 12 timezones, full crontab syntax including / , and -. Validates before it explains.

Encode text or files to Base64, decode Base64 back, preview data URLs. URL-safe and MIME-wrap variants. Images, PDFs, and text all render a live preview.

Paste a JWT. See the header, payload, and signature decoded — all client-side, never sent anywhere. Live countdown on exp claims. Flags alg=none and other security footguns.

Shrink PDFs by re-encoding images to JPEG. Quality slider, DPI target, settings saved between visits. Your PDF never leaves your browser. Tell it nothing, it tells you no secrets.

doc compress client-side

Compress it

19 · DEV ● Live

ID Generator.

UUID v4, UUID v7, ULID, Nanoid. Single or batch up to 1000. Decode existing IDs to pull out embedded timestamps. All sourced from crypto.getRandomValues — the same CSPRNG your browser uses for TLS.

MD5, SHA-1, SHA-256, SHA-384, SHA-512. Text or files up to 2 GB, streamed in 2 MB chunks so your tab doesn't freeze. Hex or Base64 output, hash-compare mode for verifying downloads. Input never leaves the page.

Every HTTP status code on one page, with what it means, when to use it, and the real-world pitfalls. Searchable and filterable. Deep-linkable — /http-status/#404 jumps straight to 404.

Drop a .ico file and see what's inside — every image at every resolution, dimensions, bit depth, BMP vs PNG blobs, AND masks, CUR hotspots. Byte-level hex dump with field annotations. Extract individual images as PNG. Browser-only.

Write Markdown on the left, see the rendered preview on the right. GFM tables, task lists, strikethrough, and auto-highlighted code blocks. Export as HTML, copy the rendered output, or print straight to PDF. Your document never leaves this page.

URL percent-encoding, HTML entity encoding, and case conversion (camel, snake, kebab, Pascal, constant, dot, path) — three panels in one page. The daily encoding tasks you keep looking up, done in your browser.

Strong random passwords from the browser's cryptographic RNG — choose length and character sets, exclude look-alike characters, and watch the entropy in bits update live. Copy with one tap. Nothing is generated on, or sent to, a server.

security password random

Generate a password

26 · GENERATE ● Live

Lorem Ipsum Generator.

Placeholder text for mockups and layouts — by paragraphs, sentences, or words, with the classic “Lorem ipsum dolor sit amet” opening optional. Copy with one tap. Generated in your browser.

generate placeholder design

Generate placeholder text

27 · DESIGN ● Live

Contrast Checker.

Measure the contrast ratio between any text and background color, then check it against WCAG 2.1 AA and AAA — for normal text, large text, and UI components. Pick two colors and see the verdict live. Runs entirely in your browser.

accessibility wcag color

Check color contrast

28 · DEV ● Live

Chmod Calculator.

Translate Unix file permissions between octal (755) and symbolic (rwxr-xr-x) notation. Toggle read/write/execute for owner, group, and other — with setuid, setgid, and sticky bits — and copy a ready-to-run chmod command. Browser-only.

unix permissions octal

Calculate permissions

29 · DEV ● Live

Base Converter.

Convert numbers between binary, octal, decimal, hexadecimal, and any radix from 2 to 36. Arbitrary-precision BigInt means even 256-bit values convert exactly — no floating-point rounding. Live, and entirely in your browser.

Drop in any file and find out what it actually is — read from its magic bytes, not its name. Recognizes 50+ formats, flags a lying extension, shows a hex header, and re-types or converts images. Nothing is uploaded.

file type magic bytes mime

Inspect a file

31 · TEXT ● Live

Word Counter.

Live counts as you type or paste — words, characters with and without spaces, sentences, paragraphs, lines, and estimated reading time. Nothing is sent anywhere.

words characters reading time

Count some text

32 · DESIGN ● Live

Color Converter.

Type or pick a color and read it back in every notation at once — HEX, RGB, HSL, and HSV — with a live preview swatch. For when your design tool and your CSS disagree on format.

Paste a URL and see it taken apart — protocol, host, port, path, query, fragment — with every query parameter listed and percent-decoded. Great for debugging redirects and tracking links.

Clean up a list: sort alphabetically, numerically, or by length; strip duplicate and blank lines; trim whitespace; reverse. Perfect for log lines, CSV columns, and allowlists.

Convert numbers to Roman numerals and back, from 1 to 3999, in both directions. Malformed numerals like IIII are rejected rather than silently "fixed." Runs in your browser.

roman numerals convert

Convert numerals

36 · DEV ● Live

Data Size Converter.

Enter a size in any unit and see it in all of them — decimal KB/MB/GB (×1000) and binary KiB/MiB/GiB (×1024), side by side. Settles the "why is my 1 TB drive smaller?" question.

Reduce any width × height to a clean ratio like 16:9, then resize without distortion — enter a new width and get the matching height. For video, images, and layouts.

16:9 resize dimensions

Calculate a ratio

38 · DEV ● Live

CRC32 Checksum.

Compute the CRC-32 of any text — the checksum inside zip, gzip, and PNG — as hex and decimal, live. A fast detector of accidental corruption (not a security hash).

Fill in a few fields and get a clean block of SEO, Open Graph, and Twitter Card tags to paste into your head — with HTML-safe escaping so quotes can't break the markup.

seo open graph twitter

Generate meta tags

40 · DEV ● Live

ASCII Table.

All 128 ASCII codes — decimal, hex, octal, binary, the character, and control-code names — in one searchable table. Look up by number, character, or name like ESC.

ascii reference codes

Open the table

41 · DEV ● Live

HMAC Generator.

Compute HMAC-SHA256, SHA384, or SHA512 for any message and secret key — hex or Base64 output, live as you type. For API signatures and webhook verification without sending secrets to a server.

Turn titles into URL-safe slugs — lowercase, hyphenated, diacritics stripped. See the permalink update live. Handy for blog posts, filenames, and route segments.

slug url seo

Slugify text

43 · TEXT ● Live

Line Ending Converter.

Convert between LF (Unix), CRLF (Windows), and CR (classic Mac) line endings in one paste. Shows counts for each style so you can spot mixed files before they break CI.

Encode Unicode hostnames to ASCII punycode (xn--…) and decode them back — RFC 3492 in the browser. Essential when DNS, curl, or your browser disagree about an internationalized domain.

punycode idn dns

Convert a hostname

45 · DEV ● Live

IPv4 Subnet Calculator.

Enter CIDR or IP + netmask and get network address, broadcast, host range, and usable host count. Quick sanity check before you paste a firewall rule or Terraform block.

cidr ipv4 network

Calculate a subnet

46 · TEXT ● Live

Levenshtein Distance.

Count the minimum single-character edits between two strings — insertions, deletions, substitutions. Useful for fuzzy matching, typo tolerance, and "how different are these?" checks.

edit distance compare text

Compare strings

47 · TEXT ● Live

ROT13 & Caesar.

ROT13 encode/decode or a custom Caesar shift on any text. Not security — just the classic reversible cipher for spoilers, puzzles, and quick obfuscation.

rot13 caesar cipher

Shift some text

48 · DEV ● Live

Java Properties Converter.

Convert between .properties files and JSON — escape sequences, comments, and key order preserved where it matters. Bridge Java config and everything else speaks JSON.

Run JSONPath queries against pasted JSON — dot notation, bracket indexes, and wildcards. Pull nested fields without writing a script. Pairs well with the JSON Fixer.

jsonpath query extract

Query JSON

50 · DEV ● Live

CSS Formatter.

Beautify or minify CSS in one paste — indentation, line breaks, and whitespace trimmed. Preview the byte savings before you ship a stylesheet.

css beautify minify

Format CSS

51 · GENERATE ● Live

Random String Generator.

Generate cryptographically random strings — length, charset, and optional symbols. Copy a token for tests, placeholders, or local dev secrets (not production key material).

random password token

Generate a string

52 · DEV ● Live

Unit Converter.

Convert length, weight, and temperature between metric and imperial units in one direction — enter a value, see all common equivalents. No Wolfram, no upload.

Convert a wall-clock time between IANA timezones with DST handled — see local time, UTC ISO instant, and offset. For scheduling across continents without guessing.

Inspect PEM blocks — certificates, CSRs, public keys, private keys — label, byte length, and Base64 payload decoded. First step before JWT or TLS debugging.

Build and sign HS256 JWTs from header and payload JSON — see the three dot-separated parts update live. For local testing only; never paste production secrets.

jwt hs256 sign

Build a JWT

56 · TEXT ● Live

Morse Code Converter.

Encode text to Morse (dit/dah) or decode Morse back to letters — standard ITU spacing. For puzzles, radio nostalgia, and explaining why telegraph operators had strong forearms.

Look up any character — code point in hex and decimal, UTF-8 bytes, HTML entity, and Unicode name. Paste an emoji or search by U+ notation.

unicode codepoint utf-8

Look up a character

58 · DEV ● Live

Luhn Validator.

Validate credit-card and IMEI numbers with the Luhn (mod 10) checksum — catches typos, not fraud. Paste a number, see pass/fail instantly.

luhn checksum validate

Validate a number

59 · DEV ● Live

Semver Parser.

Parse semantic versions — major, minor, patch, prerelease, build metadata — and compare two versions for sort order. npm-style, in the browser.

Beautify or minify HTML — indent nested tags or strip whitespace for smaller payloads. Side-by-side byte count so you know what you saved.

html beautify minify

Format HTML

New on the blog · 29 articles live

Why most "free" online tools aren't actually free.

The five hidden costs of "free" tools, and how to spot them before you upload anything sensitive. Read it, then remember it the next time a site asks for your email to "convert a PDF."

Read the essay

The vibe.

A tiny creative manifesto, because apparently everyone needs one of these now.

01Free means free

No signup wall. No "free trial." No dark patterns. We pay the bills with small, tasteful ads that don't follow you around the internet. Your files stay on your device. Your data stays yours.

02Each tool is a small gift

No bloated suites. No upsell funnels. Each tool does one thing, does it well, and gets out of your way. We are the anti-Adobe, deliberately. Tooly would not survive in a boardroom.

03Made with actual care

These took weeks. Real design, real typography, real attention to the buttons you click. "Good enough" is how we ended up with the web we have. Tooly refuses.

04The name is a joke

If you're wondering: yes, it's a Boaty McBoatface reference. No, we're not taking ourselves too seriously. Yes, the tools actually work. Welcome.

Small tools.Big vibes.