39 available • 0 coming soon
A grab bag of tools built for people who make things on the web. Generate CSS gradients, box shadows, and animations visually instead of writing them by hand. Build Content Security Policy headers, create .gitignore files from templates, or decode SSL certificates. There are also productivity tools mixed in - a Pomodoro timer, a to-do list with tags and due dates, and a Zettelkasten note system for building a personal knowledge base. If it is useful during a workday at a computer, it probably fits here.
Web developers handle sensitive data constantly: API tokens, SSL private keys, JWT payloads, CSR key material, password candidates. Pasting these into a hosted tool is a risk most security-conscious teams would rather avoid. Running everything client-side eliminates that concern entirely. It also means these tools work on air-gapped machines, during spotty hotel Wi-Fi, and on planes.
Generate .gitignore files for any project. Pre-built templates for Node.js, Python, React, Java, Go, Rust, and 50+ more technologies.
Decode an X.509 certificate field by field, check which host names it covers, and verify that each certificate in a chain was signed by the one above it
Create reusable checklists with nested items, 4 templates (Project Launch, Travel Packing, Weekly Review, Event Planning), progress tracking, and Markdown export
Pick a colour and read it back in ten notations, every one checked to parse back as the same colour. WCAG contrast ratios, the nearest CSS colour name, and colour vision simulation.
Build a cron expression and see its next runs in the zone the job will actually run in, with the day-of-month OR day-of-week rule and the daylight saving rules of crontab(5) applied
Build a Content Security Policy and see what a browser will actually apply, including the CSP3 rules that silently discard what you wrote.
Build a PKCS#10 certificate signing request with subject alternative names, RSA, ECDSA or Ed25519. Signed and verified in the page before you send it to a CA.
Create custom CSS keyframe animations visually. Add keyframes, adjust timing, and preview animations in real-time.
Create custom border radius with individual corner control, linked/unlinked mode, px/% units, interactive corner sliders on preview, and 12 shape presets
Design complex box shadows with multi-layer support, inset shadows, visibility toggle, layer reordering, opacity control, and 12 professional presets
Design a CSS button and see every state measured against WCAG on the page colour you name: resting, hover, active, focus and disabled, plus the focus ring and the border.
Create custom CSS clip-path shapes visually. Drag points to customize polygons, circles, and complex shapes.
Visual layout builder for CSS Flexbox and Grid. Toggle between modes, adjust properties interactively, use presets, and copy generated CSS code.
Build a CSS gradient and choose the colour space it is interpolated in, with the colour it keeps through the middle measured and shown.
Create favicons from text, emojis, or images with all device sizes (16x16 to 512x512), background/text color customization, border radius control, and batch download
Discover beautiful font combinations with 12 curated Google Fonts pairings, live preview, mood filters, usage tags, CSS import/variables export, and favorites
Create beautiful frosted glass CSS effects with customizable blur, transparency, and border settings.
Encode and decode HTML character references against the full WHATWG table of 2,231 names, with the numeric remapping and the context rules a browser applies.
All 64 status codes the IANA registry has assigned, plus the 21 that nginx, Cloudflare, AWS and Laravel ship without one. Type any number and get an answer.
Create professional invoices and download as PDF. Add items, taxes, discounts, and customizable details.
Write SEO, Open Graph and X card tags with every value escaped for an attribute, checked against the protocol, and the cut shown per platform.
Generate realistic fake data for testing and development. Create names, usernames, emails, addresses, phone numbers, and more. Export to JSON or CSV format
Paste a page head and see the card each platform actually gets: the title cut at its own limit, the image measured, and what the protocol says is missing.
Generate passwords from the Web Crypto generator by rejection sampling, with the entropy stated exactly from the alphabet, the cost of every rule computed, and crack times against four named attacker models
An upper bound on how strong a password is, from the patterns that actually make one guessable, with the model and its limits stated in full.
Convert certificates, requests, CRLs, keys and PKCS#7 bundles between PEM text and DER binary. The object type and the PEM label are read from the bytes, not asked for.
Focus timer using Pomodoro technique with work/break sessions, circular progress, presets (Classic 25/5, Deep Work, 52/17), stats tracking, and auto-start options
Write a robots.txt by the RFC 9309 rules, then test a URL against it and see which rule wins and why.
Generate SSL/TLS certificates for local development, with hostnames placed in the Subject Alternative Name where browsers look. Exports PKCS#8, PKCS#1 and PKCS#12, with fingerprints and install config.
Build a Subresource Integrity attribute, with more than one hash if you want, and check an existing one against the file it is meant to pin.
Generate an SSH key pair in the OpenSSH format ssh-keygen writes: Ed25519, ECDSA or RSA, with the fingerprint and randomart it prints.
Read the certificate chain a server sends and say whether it is complete, in order and in date, and build the OpenSSL commands that fetch it.
Every fact about an IPv4 or IPv6 block, plus splitting, merging, range to CIDR, and which special-purpose range an address falls in
Dual-mode time tracker with stopwatch including lap times (fastest/slowest highlighting), countdown timer with presets, sound alerts, and browser notifications
Organize tasks with priorities (low/medium/high), due dates, tags, smart filtering, search, sorting, stats dashboard, import/export, and local storage persistence
Check a link for typosquats, brand-in-subdomain tricks, mixed-alphabet homographs, and hidden destinations. Public Suffix List parsing, explainable per-rule scoring, and the link is never fetched.
Read a user agent string and mark every field: read from a token, a frozen constant, or something the string cannot answer at all.
Find your public IP address, location, timezone, and ISP information instantly via the ipapi.co lookup service
Build a personal knowledge base with [[bidirectional links]], tags, backlinks, search, note metadata, and import/export. Implements Zettelkasten method
Found a bug? Contact us at support@loopaloo.com