CSP Builder
Build and risk-score Content-Security-Policy headers visually.
OpenGenerate QR codes. - runs entirely in your browser. Free, fast and private.
Add a link, Wi-Fi string, or plain message.
Adjust pixel size and quiet zone for scanning.
The matrix draws instantly on a canvas preview.
Save the QR image for print or digital use.
A poster needs a phone-scannable link and you do not want to install a design suite for a square of pixels. QR Code Generator turns a URL or short text into a downloadable QR image in the browser.
Generate codes for event check-in URLs, Wi-Fi sharing strings, otpauth provisioning (when you already have the URI), or packaging a support link on printed material. Keep payloads short: dense QR codes fail more often when printed small or photographed at an angle.
Pitfall: putting secrets in a QR that will be photographed and shared. Treat printed codes like public URLs unless you control access behind the link.
Tip: test-scan with a phone camera before you send artwork to print. For Wi-Fi or TOTP URIs, generate from the canonical string, not a paraphrased label.
Encoding runs in the page canvas/pipeline. The text you encode is not sent to a QR SaaS to render.
Related: TOTP Studio
Processes data instantly with no server round-trips.
Your data never leaves your browser. Nothing is uploaded.
Works in any modern browser. Nothing to download or install.
No limits, no sign-up, no credit card required.
Works on desktop, tablet and mobile devices.
Beautiful in both themes. Your preference is saved.
Keyboard shortcut
Put a scannable URL on flyers, packaging, or slides.
Move a long staging URL onto a phone without typing it.
Encode short WIFI: or otpauth: strings when appropriate.
Answers for this tool. For site-wide help, open the FAQ hub.
Generators and hashers run locally. Still, never paste production secrets into any site if your security policy forbids it.
Results live in page memory until you leave or clear. Favourites/history do not save password fields unless you explicitly store them in Vault.
When applicable, tools rely on Web Crypto or well-known libraries. Read on-page notes for exact algorithms (SHA-256, bcrypt-style notes, etc.).
After load, crypto helpers typically work offline. Confirm network independence for your threat model.
Browser CSPRNG (crypto.getRandomValues) powers secure generators when the tool states so.
Treat generated secrets like passwords - share only through approved password managers, never chat apps.
OneDevToolkit aids technical workflows; it is not a certification product. See Compliance for processing model language.
Always check you are on your real OneDevToolkit domain before entering sensitive material.
Contact us via Contact with responsible-disclosure details - do not include live production secrets.