DEVELOPER TOOLBOX

What Is 2toolbox?

2toolbox is a free collection of developer utilities that run entirely in your web browser. It gathers the small, frequent jobs that otherwise send you to a different website each time: generating a UUID, hashing a file, converting hex to binary, building a Content-Security-Policy, writing an .htaccess or robots.txt, checking an XML document or an SSH config, and looking up an HTTP status code or a MIME type.

Each tool has its own page and address, so you can bookmark the ones you use. All of them share one design, one privacy model, and one small script, so moving between tools is fast and nothing about the experience changes.

Why Does a Client-Side Toolbox Matter?

Developer utilities see sensitive input. A .env file holds database passwords. A TOTP secret is the second factor of an account. An sshd_config describes how a server lets people in. Many online tools send what you paste to a server, where it can be logged, cached, or kept. A tool that never receives your data has nothing to leak.

Every 2toolbox tool does its work with code that is already in your browser tab. Hashes and TOTP codes use the browser's own Web Crypto API. Parsing, validation, and generation are plain JavaScript on the page. The page makes no request while you work, and you can confirm that yourself in about a minute with the steps above.

What Tools Are in the Encode and Crypto Lane?

These tools compute values with real cryptography or exact arithmetic.

• 2hash computes MD5, SHA-1, SHA-256, SHA-384, and SHA-512 for text or a file up to 1 GB, computes HMACs, and checks a download against a published checksum.
• 2base converts between binary, octal, decimal, hexadecimal, and any base up to 36, with a clickable bit grid and signed two's complement views up to 64 bits.
• 2otp shows live TOTP codes from a base32 secret or an otpauth URI, honors SHA-1, SHA-256, and SHA-512, and proves itself against the published RFC 6238 test vectors.

What Tools Are in the Checkers Lane?

Checkers read something you paste and report problems with line numbers.

• 2xml formats, minifies, and validates XML, lints namespaces and duplicate siblings, and converts XML to JSON and back.
• 2jq runs a labeled subset of jq, covering paths, pipes, select, length, and keys, against JSON you paste.
• 2ssh validates sshd_config and ssh_config files, flags weak algorithms and risky settings, and composes the right ssh-keygen command.
• 2dotenv finds duplicate keys, empty values, and quoting mistakes in a .env file, compares it with .env.example, and generates one.
• 2kbd shows the key, code, keyCode, location, and modifiers of any key you press, with a ready-made event handler.

How Do You Use 2toolbox?

1. Pick a lane at the top of the workbench: Generators, Encode / Crypto, Checkers, or References.
2. Choose a tool from the row beneath it. Each opens on its own page with a working example already filled in.
3. Replace the example with your own input. Results update as you type.
4. Copy or download the result. Generated server files are good defaults; test them on staging before production.

How Does 2toolbox Handle Secrets?

Two tools are built for input that is genuinely secret: 2otp, which takes a TOTP seed, and 2dotenv, which takes a .env file. Both send no analytics events of any kind, keep what you paste only in the memory of this tab, and never write it to storage or to the address bar. The 2otp field is masked by default with a reveal toggle, and autocomplete, spellcheck, and password managers are switched off for it.

Both tools wipe their input when you leave the tab, switch to another tool, or stop interacting for a few minutes. Each shows a red notice inviting you to verify all of this in the Network tab. Even so, the best habit is to test with a throwaway secret, and both tools say so on the page.