How Code Compass works

Inputs are processed by JavaScript in the current browser tab. JSON uses the native parser, hashes use Web Crypto, UUIDs and passwords use cryptographic browser randomness, and encoders use standard browser text APIs.

Security boundaries

A decoded JWT has not been verified. A hash is not encryption. Base64 is not encryption. Generated UUIDs are not secrets. Each tool page states the assumption most likely to affect its result.

Input limits

Text inputs are limited to one million characters to protect browser responsiveness. The regex tester also limits pattern length, although unusually complex expressions can still be expensive.