About worktools.dev
Why worktools.dev exists, how it works, and who builds it.
1. Why This Site Exists
Most of us paste things into online tools without thinking twice: an API response to reformat, a token to decode, some JSON to reshape. Many of those tools send what you paste to a server, and some keep it. In 2025, researchers found years of credentials and customer data sitting in the public "recent saves" of two popular JSON formatters.
worktools.dev takes the other approach. The tools here run entirely in your browser, so there's no server copy to leak in the first place.
2. How It Works
- Processing happens in your tab: JSON parsing and text generation run as JavaScript in your browser. When you close the tab, the data is gone.
- No backend: the site is static files served from a CDN. There are no accounts, no database, and no API that tool input could be sent to.
- A restrictive security policy: pages are served with a Content Security Policy that limits which servers they can contact. The Security page shows the current policy and how to check all of this yourself.
- Works offline: once a tool page has loaded, you can disconnect from the internet and keep using it.
3. Design Principles
Pages are plain HTML. JavaScript loads only for the interactive tool itself, which keeps pages small and quick to load.
The tools contain no code that sends your input anywhere, and the page's security policy backs that up.
Space for every panel is reserved up front, so the page doesn't shift around while it loads.
Each tool page ships about 20 KB of compressed JavaScript, so tools are ready to use almost as soon as the page appears.
4. Who Builds It
worktools.dev is built and maintained by one developer and published by Tektonik Labs LLC, a small independent software studio. The tools come from the small, repetitive jobs that turn up in everyday frontend work.
5. What's Next
The current tools are the Strapi v4 to v5 converter and three placeholder text generators. Tools I'm working on next, built the same way:
- Tailwind v4 config migrator: convert a
tailwind.config.jsfile into v4 CSS@themevariables. - JWT inspector: decode and verify JSON Web Tokens without sending them or your keys anywhere.
- Multi-layer decoder: unwrap nested Base64, URL, and other encodings in one step.
- Key pair generator: create RSA and ECDSA key pairs with the browser's built-in Web Crypto API.
Have an idea for a tool, or found a bug? Get in touch.