What is Z Tools?

Z Tools is a free online utility platform created to simplify everyday digital tasks. We believe that essential tools should be accessible to everyone — without downloads, registrations, or hidden fees. Whether you are a developer debugging API responses, a designer optimizing images for the web, a content writer formatting Markdown documents, or a casual user creating a QR code for your WiFi network, Z Tools provides fast, reliable, and secure solutions that work on any device with a modern web browser.

Our platform is designed around three core principles: simplicity (every tool does one thing exceptionally well with no unnecessary complexity), privacy (your data stays in your browser whenever possible, and uploaded files are automatically deleted), and speed (all tools are optimized for instant results even on slower connections).

Our Mission

Our mission is to build the most useful collection of browser-based utilities on the internet. We focus on providing professional-grade tools that anyone can use without technical knowledge, while maintaining strict privacy standards that bigger platforms often ignore.

We created Z Tools after noticing that many online utility websites were cluttered with ads, required registration, tracked users, or had dangerously poor security practices. We set out to build something different: a clean, fast, trustworthy alternative that puts users first.

Every decision — from the tools we offer to the security headers we implement — is made with user benefit as the primary criterion. We don't sell user data, we don't use invasive tracking, and we don't have investors demanding growth at the cost of user experience.

Technology Stack

Z Tools is built with a modern, lightweight technology stack optimized for performance, security, and maintainability. We chose our technologies based on reliability and widespread industry adoption rather than trends.

Frontend

  • HTML5 + CSS3 — Semantic markup with custom CSS variables
  • Vanilla JavaScript — No heavy frameworks for maximum performance
  • No build step — Simple, fast deployment
  • External Libraries — QRCode.js, jsQR, Marked.js, html2canvas

Backend

  • PHP 8.2+ — Server-side processing for image compression
  • GD Library — Image processing and compression
  • HTTPS Only — Enforced via HSTS header
  • File-based Sessions — No database required

Infrastructure

  • Shared Hosting Compatible — Runs on standard LAMP environments
  • Automatic File Cleanup — 5-minute expiry on temporary uploads
  • Rate Limiting — File-based request throttling
  • Security Headers — X-Frame-Options, CSP, HSTS, etc.

Security Measures

We take security seriously and implement multiple layers of protection:

  • CSRF Tokens — All server-side form submissions (image uploads) include cryptographic tokens
  • Input Validation — All user inputs are sanitized using htmlspecialchars() with ENT_QUOTES
  • File Type Verification — MIME type checked via PHP's finfo extension, not just extension
  • Dimension Limits — Images capped at 4000x4000 pixels to prevent memory exhaustion attacks
  • Random Filenames — Uploaded files use 16-character cryptographic random names, never user-provided
  • Secure Download Proxy — Files served through download.php with directory listing disabled

All code undergoes regular review, and we monitor for vulnerabilities in our dependencies. If you discover a security issue, please contact us immediately at [email protected].

Our Tools

Z Tools currently offers eleven free utilities. The five newest tools use the same browser-side processing model as the original collection and include shareable inputs for short, non-sensitive values.

QR Code Generator & Scanner

Create QR codes for URLs, text, WiFi, email, and phone numbers. Features include multiple size options (128px to 1024px), error correction (Level M), and PNG download. The scanner decodes existing QR codes from uploaded images, drag-and-drop, or clipboard paste.

Open QR Code Tool →

Secure Password Generator

Generate cryptographically strong passwords using the Web Crypto API (crypto.getRandomValues()). Features include customizable length (4-128 characters), character type toggles, similar character exclusion, and real-time strength visualization.

Open Password Generator →

JSON Formatter & Validator

Format, validate, minify, escape, and unescape JSON data. Features include real-time syntax highlighting, detailed error messages with line numbers, and URL parameter support for sharing formatted JSON via links.

Open JSON Formatter →

Online Image Compressor

Reduce JPG, PNG, WebP, and GIF file sizes while maintaining visual quality. Features include quality slider (1-100), before/after preview, EXIF orientation correction, and automatic original fallback if compression doesn't help.

Open Image Compressor →

Base64 Encoder & Decoder

Convert text and images to Base64 format. Features include proper Unicode support via TextEncoder API, image-to-Base64 conversion for embedding in HTML/CSS, Data URL generation, and clipboard paste support for images.

Open Base64 Tool →

Markdown Converter

Write Markdown with live preview and export to PDF, PNG, or Word documents. Features include GFM (GitHub Flavored Markdown) support, syntax highlighting in code blocks, table support, and export to multiple formats.

Open Markdown Converter →

Hash Generator

Compute MD5 and SHA-family digests from UTF-8 text locally. The page labels legacy algorithms and explains why plain hashes are not suitable for password storage.

Open Hash Generator →

URL Encoder & Decoder

Percent-encode complete URIs or individual components, decode encoded input, and surface malformed escape sequences instead of silently changing them.

Open URL Tool →

Case Converter

Split words across separators and case boundaries, then generate nine common writing and programming conventions at once.

Open Case Converter →

JWT Decoder

Inspect a token's header, payload, and encoded signature locally. The tool deliberately does not claim to verify authenticity without a key.

Open JWT Decoder →

Color Converter

Convert HEX, RGB, HSL, HSV, and approximate CMYK values, with calculated WCAG contrast against white and black.

Open Color Converter →

Editorial Standards

Tool pages explain what the utility does, its important limits, and how a user can verify the result. Articles are kept only when they add a distinct reference guide rather than repeating the tool page.

Specifications and security claims link to primary references where practical. Shorter companion articles are removed from the public guide index until they have a manual technical review and a clear reason to exist.

How we review content

  • Reproducible examples: Tool behavior is checked in a real browser with known inputs and expected outputs.
  • Source verification: Statistics, version numbers, and security claims are linked to primary sources (vendor documentation, RFCs, peer-reviewed research, government advisories).
  • Accurate dates: Publication and modification dates reflect the article metadata rather than a site-wide placeholder.
  • Corrections policy: Reported errors are investigated against the implementation or a primary source, then corrected in place.
  • No sponsored content: We do not accept payment for coverage, and we do not write positive reviews of tools we haven't tested.

Who Builds Z Tools

Z Tools is an independent, one-person project. It is built, maintained, written, and reviewed by a single founder — Xiaotong Xia — and every article on this site carries her real byline. If you write to us, she is the person who reads it and replies.

👩️‍💻

Xiaotong Xia

Founder, engineer, and writer

Xiaotong Xia independently builds and maintains Z Tools, writes its documentation, and reviews user reports. Technical claims are intended to be reproducible in the tools themselves or traceable to the primary references linked from each guide.

Based in: Hangzhou, China · Contact: [email protected]

How the Site Operates

These figures describe behavior that can be checked directly from the current site and its public pages.

11

Live tools, all free

12

Curated guides in the public index

0

User accounts required

5 min

Max upload retention

$0

Cost to use any tool

The image tool is the only utility that uploads user content for processing. Its temporary files expire after five minutes; the remaining tools process their primary input in the browser.

Get in Touch

For bug reports, feature requests, security disclosures, press inquiries, or just a quick question, please use our contact form. You can also reach us directly at [email protected]. We read every message and typically respond within 1–2 business days.

For security vulnerabilities, please contact us directly rather than posting publicly. We follow responsible disclosure practices and credit reporters in our release notes (unless you prefer anonymity).

Roadmap

New work is prioritized from reproducible bug reports and specific user workflows. One utility currently under consideration is:

  • Regex Tester — Test regular expressions with live matching visualization

If there's a tool you'd like us to build, let us know via email. Your use case description helps us design tools that are genuinely useful, not just functional.