Zeugly is a free, privacy-first web utility toolkit and developer sandbox. It offers over 95+ browser-based tools to format JSON, decode JWTs, resize images, generate OG preview cards, create secure passwords, convert timestamps, analyze cron expressions, minify SVGs, and inspect QR codes safely. Every action runs 100% client-side in your local browser.

Do I need an account or subscription to use the tools?

No. All tools on Zeugly are 100% free with no sign-ups, no registration, no subscriptions, and no usage limits. You can open any tool, complete your work, and close the tab anytime.

Are tools on Zeugly available offline?

Yes. Once the web application loads in your browser, all processing scripts and tool logics run locally. You can continue using tools like JSON Formatter, Base64 Encoder, Password Generator, and Image Resizer even if your internet connection drops.

How do client-side utility tools keep my data safe?

Unlike traditional online converters that upload your code, confidential files, or text to remote cloud servers, Zeugly uses native browser APIs (such as Web Crypto API, Canvas API, and FileReader). Your inputs are parsed and processed in your local browser memory, ensuring your code, passwords, JWT tokens, and images never leave your machine.

Does Zeugly collect or store any personal data or files?

No. We operate under a strict zero-data collection rule. We have zero backend user databases, zero file storage servers, and zero data tracking scripts. We never ask for or store names, mobile/phone numbers, or physical addresses.

What is Zeugly's cookie policy regarding Google AdSense?

We use third-party advertising partners, including Google AdSense, to serve non-intrusive advertisements. Third-party vendors use cookies to serve ads based on prior web visits. Users can opt out of personalized advertising by visiting Google Ads Settings or www.aboutads.info.

How does client-side JSON formatting and JWT decoding work?

When you paste JSON or JWT strings into our developer tools, JavaScript running inside your web browser parses the payload in memory. Syntax validation, formatting, and JWT claim extractions happen instantaneously without sending any tokens or data payloads across the network.

Are generated passwords and UUIDs cryptographically secure?

Yes. Our password generator and UUID v4 creator use hardware-backed operating system entropy via window.crypto.getRandomValues(). Seeds are generated strictly in your local device CPU.

Can I resize images, create OG cards, or add watermarks without uploading them to a server?

Yes! Our image resizer, watermarking tool, OG image generator, SVG optimizer, vectorizer, and converter tools render images onto HTML5 Canvas elements inside your browser. Calculations and compression are performed locally on your device, and processed files are downloaded directly from your browser memory.

What dimensions are used by the Open Graph (OG) Image Generator?

Our OG Image Generator renders at the standard 1200 x 630 pixels (1.91:1 ratio), optimized for Facebook, Twitter Cards, LinkedIn, Slack, and Discord link previews.

What is QR Code Phishing (Qishing) and how does Zeugly detect it?

Qishing is a social engineering attack where malicious actors replace legitimate QR codes with malicious stickers pointing to spoofed websites. Zeugly allows you to safely scan digital files or live camera streams, evaluating destination URLs for SSL encryption, phishing keywords, known link shorteners, and suspicious query parameters before you visit them.

Why is client-side QR scanning safer than traditional online scanners?

Most web-based QR scanners stream camera feeds or parsed URLs to backend servers, creating logs of scanned locations and links. Zeugly decodes QR codes entirely in your browser using WebAssembly and jsQR/ZXing engines, keeping your camera stream and URLs private.

Secure Password Generator - Workspace

Secure Password Generator

Instantly generate cryptographically strong, random passwords. Created client-side using standard secure APIs. Your credentials are never stored or transmitted.

How to Use Report Bug

Generated Password

Strength:

Weak

Entropy: 0 bitsNot recommended

Settings

Password Length16

Include CharactersUppercase (A-Z)Lowercase (a-z)Numbers (0-9)Symbols (!@#$%^&*)

ExclusionsExclude Similar (i, l, 1, L, o, 0, O)

How to Measure Password Strength & Security

Entropy & Mathematical Bit Security

Information theory uses "bits of entropy" to measure password strength. It quantifies how many combinations a brute-force script would have to compute to crack it. Every character added increases search difficulty exponentially. A security level of 80 bits is considered safe for normal login accounts, while 128 bits is recommended for high-security database keys and crypto wallets.

Cryptographic Random Generation

Many web generators use simple pseudo-random math scripts (`Math.random()`), which are predictable and vulnerable to security exploits. This generator utilizes the standard Web Cryptography API (`window.crypto.getRandomValues`), producing truly unpredictable numbers generated at the hardware/operating-system level.

Frequently Asked Questions

Why should I avoid similar characters?

Similar characters like uppercase `I`, lowercase `l`, and digit `1`, or uppercase `O` and digit `0` are extremely easy to confuse when written down or typed manually. Excluding them avoids transcription mistakes without meaningfully weakening the password.

Are passwords saved anywhere?

No. The generation code is entirely client-side. There are no backend database servers involved, and nothing is transmitted over the internet, ensuring that your generated security credentials are known only to you.

Step-by-Step Guide

How to Use Secure Password Generator

01Step 1

Select Password Length

Use the slider to set password length (from 8 to 128 characters).

02Step 2

Toggle Character Sets

Enable uppercase letters, lowercase letters, numbers, and special symbols (`!@#$%^&*`).

03Step 3

Hardware Cryptographic Generation

Operating system hardware randomness (`crypto.getRandomValues`) generates un-predictable passwords.

04Step 4

Copy & Check Entropy

Check password strength entropy bit score and copy to clipboard securely.

Key Features & Capabilities

Hardware Web Crypto API random generation (`crypto.getRandomValues`)
Entropy score & crack-time estimator meter
Custom character set toggles (uppercase, lowercase, numbers, symbols)
Exclude confusing characters option (1, l, I, 0, O)
100% private offline browser execution

Privacy & Security Guarantee

100% Client-Side Privacy: All operations occur locally in your web browser memory using JavaScript and WebAssembly. Your files, text payloads, and images are never uploaded to external servers or stored in cloud databases.

Processing Mode: 100% Offline ClientZero Server Telemetry

Frequently Asked Questions

View All Platform FAQs

Are generated passwords sent or saved to any cloud database?

No. Passwords are generated 100% locally inside your web browser's local memory. Zero network transmission.

What makes a password cryptographically secure?

Using `window.crypto.getRandomValues` ensures true entropy from your operating system's hardware random number generator, preventing PRNG predictability.

Experiencing an issue with Secure Password Generator?

Notice a bug, calculation error, or unexpected result? Let us know.

Report Bug