All tools
Email Validator
Syntax, a live MX lookup to see whether the domain accepts mail at all, and flags for disposable and role-based addresses. No message is ever sent.
More tools
All 16JWT Decoder & Verifier
Decode a JSON Web Token to inspect header and payload, check expiry, and verify the signature (HS* with a secret, RS*/ES* with a public key). Decoding stays in your browser.
Password Breach Checker
Check if a password appears in a known data breach - privately. Hashed in your browser, only a five-character prefix is sent (k-anonymity).
One-Time Secret
Share a password or note via a link that self-destructs after one view. Encrypted in your browser - the key never reaches the server.