13 Free Everyday Utilities: Passwords, QR Codes, Timers and Text Encoding

This last group is the junk drawer. Passwords, QR codes, a stopwatch, a world clock, a coin flip, and four tools that convert text into other representations of itself. Individually trivial, collectively the stuff you need at awkward moments.

The through-line is that all thirteen run locally. For a password generator that is not a nicety — it is the entire reason the tool can be trusted at all.

How strength is estimated matters too. Most checkers approximate the size of the search space, which is a reasonable proxy but not the truth: `CorrectHorseBatteryStaple` scores well on entropy, while `P@ssw0rd1!` scores well on character variety and badly in practice because it appears in every cracking wordlist on earth.

Use the generator for anything you care about, and if you have to remember a password, use a passphrase of four or five unrelated words. That is the specific case where memorability and strength actually overlap.

QR codes are one of those tools where the output quality is entirely determined by one decision: how much data you put in. A short URL encodes into a small, easily-scannable code. A paragraph of text with punctuation encodes into something dense and unreliable at small sizes.

Two practical rules. First, always test-scan the code at the size it will actually be printed before you print two hundred of them. Second, Wi-Fi and plain URL codes behave differently on different phones — if a code is going to a mixed audience, prefer a plain URL to a landing page that then links onward, because it works everywhere and you can change where it points.

The world clock earns its place for one specific reason: daylight saving. Half the world's scheduling mistakes are not arithmetic errors, they are a moment where two cities were four hours apart last week and five hours apart this week, and nobody checked.

Before scheduling anything across a timezone, put both cities in the world clock and look — do not compute the offset from memory. This is also why meeting invitations should carry a timezone rather than a bare hour.

On the Pomodoro timer: the technique works for a specific kind of task — bounded, focused, uninterrupted. It does not work for debugging, where the correct move when stuck is to walk away, not to start another 25-minute block. Use it when it helps.

The Random Number Generator and the List Randomizer cover the cases that actually come up: picking a number in a range, and putting a list into a fair order. Worth a sentence on fairness. Both use a pseudo-random generator, which for deciding who pays for lunch is indistinguishable from a real coin. For anything consequential — a draw with prizes, an allocation with money attached — you want a source you can audit, and a browser tab is not that. The value here is removing the human, who picks badly when motivated.

Four tools that move text between representations. None of them are encryption, and the distinction is worth stating because it is constantly confused: an encoding is reversible by anyone and has no key. Encryption requires a key.

These are useful for exactly two things. First, understanding how text becomes bytes, which is the mental model you need whenever anything looks garbled. Second, actually debugging: when a payload shows up as hex, the Hex to Text converter is how you find out what it says.

They are not useful for hiding anything. ROT13 has no key — the shift is public — so it hides nothing from anyone who knows what ROT13 is. The Caesar cipher has 25 possible shifts, which a human breaks in minute one.

The file size converter has one genuinely valuable output: it tells you why a drive advertises a bigger number than your computer reports. Vendors sell in powers of ten, operating systems report powers of two, and the gap is about 7 percent at every scale. That is not a fault, it is two conventions.

A webhook is failing validation and the payload in the log looks like `\x48\x65\x6c\x6c\x6f`. This is a ninety-second diagnosis.

Is the password generator safe if everything runs in the browser? Yes, and more so than a server-based one: the password is generated on your machine and never transmitted, so there is nothing to intercept, log or breach. The trade-off is that you cannot recover a password you did not save.

Can I trust the virtual coin flip? For casual decisions, yes. For anything with money or prizes attached, use a source you can audit.

Are the ciphers secure? No. None of them. ROT13 and Caesar ciphers have no secret key and exist to teach encoding, not to protect anything.

Do these work offline? Once a page has loaded, yes — everything is local.

Is there a limit on text length for the converters? Only your device's memory, since nothing is sent anywhere.

Long unique passwords beat short clever ones, a QR code is only as good as the data inside it, check timezone offsets rather than computing them, and encoding is not encryption.