Free tools · no signup
Free developer tools.
A handful of fast, no-login utilities we built on top of the Eveses API — validate a phone number, generate a TOTP, decode a JWT, check a proxy. Rate-limited per IP; no key required.
Local compute
30 / minPhone number validatorCheck validity, line type, region and carrier for any number, and get every format (E.164, national, RFC3966).2FA / TOTP authenticatorCreate a TOTP secret with a scannable QR, watch the live 6-digit code tick, and verify any code against a secret.UUID, password & token generatorOne-click cryptographically-strong UUID v4, random passwords (with or without symbols) and API tokens.JWT, Base64 & URL decoderInspect a JWT header and payload, and encode/decode Base64 and URL strings. JWT signatures are never verified.User-Agent parserBreak a User-Agent into browser, OS, device type and bot flag — pre-filled with your own.Hash generatorHash any text with MD5, SHA-1, SHA-256 and SHA-512 — pick the algorithms, copy each digest.Unix timestamp converterTwo-way Unix timestamp ↔ datetime with an IANA timezone picker, DST flag and every common format.Luhn & IBAN validatorValidate a card number by the Luhn algorithm and check an IBAN’s structure and country — checksum only, never a live account.curl to code converterTurn any curl command — including DevTools "Copy as cURL" — into Python, Node, PHP, Go, Java, C# or Ruby, with the proxy wired the way each one needs it.
Network
10 / minProxy checkerCheck whether an HTTP/SOCKS proxy is alive, measure latency and see its exit IP and anonymity level.What's my IPShow your public IP (v4/v6), language and the request headers your client is sending.DNS & port checkerLook up A/AAAA/MX/TXT/NS/CNAME records for a domain, and check whether a TCP port is open.
Guides & references
readWhat is TOTP (Time-based One-Time Password)?TOTP is the 6-digit code your authenticator app shows for 2FA. Learn how time-based one-time passwords work, and generate or verify one free.TOTP vs HOTP: what is the difference?TOTP is time-based, HOTP is counter-based. Learn the difference, when each is used, and generate a working TOTP code with our free tool.What is a JWT (JSON Web Token)?A JWT is a signed, Base64URL-encoded token with three parts: header, payload, signature. Learn how JWTs work and decode one free — no data leaves your browser.What is Base64 encoding?Base64 turns binary data into safe ASCII text using 64 characters. Learn what it is, why it is not encryption, and encode or decode text free.What is URL encoding (percent-encoding)?URL encoding replaces unsafe characters with %XX escapes so they survive inside a URL. Learn how percent-encoding works and encode/decode free.What is a UUID?A UUID is a 128-bit identifier that is unique without a central authority. Learn UUID v4 vs v1 and generate one free.What is E.164 phone number format?E.164 is the international standard for phone numbers: a + then country code and number, max 15 digits. Learn the format and validate a number free.What is a VoIP number?A VoIP number routes calls and texts over the internet instead of a cellular network. Learn VoIP vs mobile and check any number’s line type free.What is the Luhn algorithm?The Luhn algorithm is the checksum that catches typos in credit-card and IMEI numbers. Learn how it works and validate a number free.What is an IBAN?An IBAN is the international bank account number format with a built-in checksum. Learn its structure and validate an IBAN free.What is a Unix timestamp (epoch time)?A Unix timestamp is the number of seconds since 1970-01-01 UTC. Learn how epoch time works and convert a timestamp to a date free.What is a User-Agent string?A User-Agent is the header your browser sends to identify itself. Learn how to read a UA string and parse yours free.SHA-256 vs MD5: what is the difference?MD5 is fast but broken for security; SHA-256 is the modern default. Learn the difference and hash any text free with MD5, SHA-1, SHA-256/512.HTTP vs SOCKS proxy: what is the difference?HTTP proxies understand web traffic; SOCKS proxies forward any TCP/UDP. Learn the difference and test a proxy free.How to decode a JWTDecode a JSON Web Token to read its header and payload without the secret. Step-by-step, plus a free browser-side JWT decoder.How to set up TOTP two-factor authenticationSet up app-based two-factor authentication with TOTP. Step-by-step, plus a free tool to generate a secret, QR code, and verify codes.How to generate a strong passwordLength beats complexity. Learn what makes a password strong and generate a random one free.How to validate a phone numberValidate a phone number’s format, line type (mobile/VoIP), and region. Step-by-step, plus a free validator that returns E.164 and carrier.How to convert a Unix timestamp to a dateConvert epoch seconds (or milliseconds) to a readable UTC or local date. Step-by-step, plus a free two-way timestamp converter.How to check if a port is openCheck whether a TCP port is open on any host from our servers. Step-by-step, plus a free port checker and DNS lookup.How to find my IP addressFind your public IP address and see the headers you send. Free, instant, and an explanation of public vs private IPs.How to check if a proxy is workingTest a proxy’s status, latency, exit IP, and anonymity level. Step-by-step, plus a free proxy checker.What is 2FA (two-factor authentication)?Two-factor authentication adds a second proof of identity on top of your password. Learn the factor types and generate a TOTP second factor free.What is HMAC?HMAC proves a message was not tampered with and came from someone who holds a shared secret. Learn how it works — it powers TOTP and JWT signing.What is an API token?An API token is a secret string that authenticates requests to an API. Learn how tokens work, keys vs tokens, and generate a random token free.What is DNS?DNS translates domain names into IP addresses — the internet’s phone book. Learn how it works and run a DNS lookup free.What is an MX record?An MX record tells the internet which mail server handles email for a domain. Learn how MX records and priorities work, and look one up free.What is a residential proxy?A residential proxy routes traffic through a real home ISP IP, so it looks like an ordinary user. Learn residential vs datacenter and test a proxy free.What is UTC?UTC is the global time standard that timestamps and servers use, with no daylight saving. Learn UTC vs GMT and convert a timestamp free.How to generate a UUIDGenerate a random UUID v4 for database keys, request IDs, or file names. Free online generator plus one-liners for popular languages.How to encode to Base64Encode text or binary to Base64 so it survives text-only transports. Free online tool plus the one-liner in each language.How to decode Base64Decode a Base64 string back to its original text or bytes. Free online tool plus the decode one-liner in each language.How to hash a stringHash any text to MD5, SHA-1, SHA-256 or SHA-512. Free online tool plus the code one-liner — and why you should not hash passwords this way.How to generate an API tokenGenerate a high-entropy API token, webhook secret, or session key. Free online generator plus secure-storage best practices.How to do a DNS lookupLook up a domain’s DNS records — A, AAAA, MX, TXT, CNAME — from our servers. Step-by-step, plus what each record tells you.How to parse a User-Agent stringExtract the browser, version, OS and device from a User-Agent string. Free parser plus why UA parsing is a hint, not proof.How to validate a credit card numberValidate a card number’s format and checksum with the Luhn algorithm before charging it. Free checker plus what Luhn does and does not prove.How to convert a date to a Unix timestampTurn a human date into epoch seconds (or milliseconds) for APIs, JWTs, and databases. Free two-way converter plus the code one-liners.Base64 encodeEncode text to Base64 instantly in your browser. Free, no signup — plus what Base64 is and when to use it.Base64 decodeDecode a Base64 string back to text instantly in your browser. Free, no signup, plus tips when decoding fails.URL encodePercent-encode a string so it is safe inside a URL or query parameter. Free online URL encoder, plus when to use it.URL decodeDecode a percent-encoded (%XX) string back to readable text. Free online URL decoder.Unix timestamp to dateConvert a Unix timestamp (epoch seconds or milliseconds) to a readable UTC and local date. Free two-way converter.Date to Unix timestampConvert a human date to a Unix timestamp in epoch seconds or milliseconds. Free two-way converter for APIs, JWTs, and databases.String to SHA-256Generate the SHA-256 hash of any text instantly. Free online SHA-256 tool, plus when to use it (and when not to).String to MD5Generate the MD5 hash of any text instantly. Free online MD5 tool — plus why MD5 is fine as a checksum but broken for security.What is a Bearer token?A Bearer token authenticates API requests via the Authorization header — whoever holds it can use it. Learn how it works and decode a JWT bearer free.What is an otpauth:// URI?The otpauth:// URI is what a 2FA QR code encodes — issuer, account, and secret. Learn its format and generate one free.What is Base32?Base32 encodes bytes using 32 case-insensitive characters — the format of 2FA secrets. Learn how it differs from Base64.What is a nonce?A nonce is a unique value used once to prevent replay attacks and duplicate requests. Learn where nonces are used and generate one free.What is a checksum?A checksum is a small value derived from data to detect accidental corruption. Learn how checksums work and compute one free.What is a datacenter proxy?A datacenter proxy routes traffic through a hosting-provider IP — fast and cheap but easy to detect. Learn when to use it and test one free.What is a rotating proxy?A rotating proxy gives you a new exit IP per request or session, spreading traffic to avoid blocks. Learn how rotation works and test a proxy free.What is an A record?An A record maps a domain name to an IPv4 address; AAAA maps to IPv6. Learn how they work and look one up free.What is a CNAME record?A CNAME record aliases one domain name to another, so it inherits that name’s address. Learn how CNAMEs work and look one up free.What is a TXT record?A TXT record holds arbitrary text in DNS, used for domain verification and email policies like SPF and DKIM. Learn how and look one up free.What is reverse DNS (PTR)?Reverse DNS maps an IP address back to a hostname via PTR records — important for email deliverability. Learn how it works.What is a network port?A port is a numbered endpoint that lets one server run many services on one IP. Learn common ports and check if one is open free.What is ISO 8601?ISO 8601 is the unambiguous international date-time format like 2026-07-16T10:00:00Z. Learn the format and convert to a timestamp free.What is SHA-1?SHA-1 is a 160-bit hash that is now broken for security after practical collisions. Learn where it lingers and hash text free.What is SHA-512?SHA-512 is a 512-bit member of the SHA-2 family, secure and often faster on 64-bit CPUs. Learn when to use it over SHA-256.What is a country calling code?A country calling code is the prefix that routes an international call to a country, like +1 or +44. Learn how they work and validate a number free.What is a toll-free number?A toll-free number is billed to the business, not the caller — like US 800/888 numbers. Learn how they work and detect a number’s type free.What is a public IP address?A public IP is the internet-facing address the world sees; a private IP is local to your network. Learn the difference and find yours free.IPv4 vs IPv6: what is the difference?IPv4 uses 32-bit addresses and is running out; IPv6 uses 128-bit and is effectively unlimited. Learn the difference and see your IP free.What is proxy anonymity (transparent, anonymous, elite)?Proxy anonymity levels describe how much a proxy reveals about you. Learn transparent vs anonymous vs elite and test a proxy free.What is an SPF record?An SPF record lists which servers may send email for your domain, fighting spoofing. Learn how SPF works and look yours up free.How to verify a TOTP codeVerify a 6-digit TOTP code against a shared secret, with a drift window. Step-by-step, plus a free tool to test it.How to check if a phone number is VoIPDetect whether a phone number is a VoIP line or a real mobile before trusting it for verification. Free line-type lookup, step-by-step.How to format a phone number to E.164Convert a local or messy phone number into clean E.164 for APIs. Step-by-step, plus a free validator that outputs E.164.How to check my IP through a proxyConfirm a proxy or VPN is routing your traffic by checking the exit IP. Step-by-step with a free What’s-my-IP tool.What is DKIM?DKIM cryptographically signs your outgoing email so receivers can verify it was not altered and really came from your domain. Learn how it works.What is DMARC?DMARC tells receiving servers what to do with email that fails SPF or DKIM, and where to send reports. Learn how DMARC works and look it up free.What is a landline number?A landline is a fixed-line phone tied to a physical location, not a mobile SIM. Learn landline vs mobile and detect a number’s type free.What is a hash collision?A hash collision is two different inputs with the same hash. Learn why collisions break MD5 and SHA-1 and why SHA-256 is safe.What is a salt in password hashing?A salt is random data added to each password before hashing so identical passwords hash differently. Learn why salts defeat rainbow tables.What is a 2FA recovery code?Recovery codes are one-time backup codes that let you sign in if you lose your 2FA device. Learn how they work and store them safely.What is a webhook signature?A webhook signature is an HMAC a provider sends so you can verify a webhook is authentic and untampered. Learn how it works.What is JWT expiration (the exp claim)?The exp claim is a Unix timestamp after which a JWT is invalid. Learn how JWT expiry works and decode a token to read its exp free.What is a private IP address?A private IP is used inside your local network and is not routable on the internet. Learn the private ranges and find your public IP free.What is a premium-rate number?A premium-rate number charges the caller extra, with part of the fee paid to the service. Learn how they work and detect a number’s type free.How to validate an IBANCheck an IBAN’s country format and mod-97 checksum before sending a payment. Step-by-step, plus a free IBAN validator.How to verify a webhook signatureVerify an incoming webhook with an HMAC signature so you only trust genuine events. Step-by-step with the security pitfalls to avoid.How to check DNS propagationConfirm a DNS change has taken effect by checking the record from outside your network. Step-by-step, plus why TTL controls the wait.How to test a SOCKS5 proxyConfirm a SOCKS5 proxy is working — alive, latency, and exit IP. Step-by-step, plus a free proxy checker.How to read a JWT’s expiryFind out when a JWT expires by decoding it and converting the exp claim. Step-by-step with a free browser-side decoder.How to find a website’s IP addressFind the IP address behind any domain with a DNS lookup of its A/AAAA records. Step-by-step, plus what a CDN or proxy changes.How to check an SPF recordLook up and read a domain’s SPF record to debug email deliverability. Step-by-step, plus what the mechanisms mean.How to get the current Unix timestampGet the current Unix timestamp in seconds or milliseconds, online or in code. Free tool plus the one-liner in each language.How to check if a website is downWork out whether a site is truly down or only unreachable from your network, using DNS and port checks. Step-by-step.How to generate a random stringGenerate a cryptographically random string for tokens, keys, and IDs. Free tool plus the secure one-liner in each language.How to encode a URL parameterPercent-encode a query-string value so special characters do not break the URL. Step-by-step, plus the right function per language.How to look up a phone number’s carrierFind a phone number’s carrier, region, and line type. Step-by-step, plus what number portability means for accuracy.String to SHA-1Generate the SHA-1 hash of any text. Free online tool — plus why SHA-1 is fine as a checksum but deprecated for security.String to SHA-512Generate the SHA-512 hash of any text instantly. Free online SHA-512 tool, plus when to prefer it over SHA-256.Epoch milliseconds to dateConvert a 13-digit millisecond epoch timestamp (like JavaScript’s Date.now) to a readable date. Free two-way converter.Base64URL decodeDecode a Base64URL string — the URL-safe variant used in JWTs and URLs — back to text. Free online decoder.How to generate a QR code for 2FACreate a scannable 2FA QR code from a TOTP secret and otpauth URI. Step-by-step, plus a free tool that renders one.What is a data URI?A data URI embeds a file inline in a URL, often Base64-encoded, instead of linking to it. Learn the format and encode/decode Base64 free.How to check a domain’s MX recordLook up which mail servers handle a domain’s email and in what priority order. Step-by-step, plus how to read the results.
These run on the Eveses API.
Get an API key for programmatic access, higher limits and SMS numbers, proxies & the web unblocker.
Create a free account →