Blog

Remove GPS Location From Photos Before You Post Them Online

Photos can carry your exact GPS coordinates in hidden EXIF data. What that metadata contains, how to check it, and how to strip it without uploading anything.

12 August 2026

Why Your Password Generator Should Never Touch a Server

A password generator that calls a server could log the password it just made for you. Here's why client-side generation and real randomness matter.

5 August 2026

How to Decode a JWT Without Pasting It Into a Random Website

JWT payloads often contain more than you expect. Here's what's inside a token, why pasting one into an online decoder is risky, and how to inspect it locally.

29 July 2026

What Is a TOTP Code, and How Do Authenticator Apps Actually Work?

Authenticator codes aren't sent to you — your phone computes them from a shared secret and the current time. How TOTP works, and why it beats SMS.

22 July 2026

WCAG Color Contrast: What AA and AAA Actually Require

WCAG color contrast in plain terms — the 4.5:1 and 3:1 thresholds, when large text qualifies, common mistakes, and how to check your own palette.

15 July 2026

What Is Base64 Encoding (and Why It's Not Encryption)

Base64 turns binary data into plain text so it can travel through systems built for text. What it does, why it inflates size, and why it offers no security.

8 July 2026

How to Verify a Download With a Checksum (SHA-256)

That SHA-256 string next to a download lets you confirm a file arrived intact and untampered. Here's what a checksum proves and how to verify one yourself.

1 July 2026

How to Encrypt a Note in Your Browser With AES-256-GCM

Encrypt a message locally with a passphrase and share only the result — no app, no account, no server. How AES-256-GCM works, and where its real weak point is.

24 June 2026

What Is a UUID (and When Should You Use Version 4)?

UUIDs let independent systems mint unique IDs with no coordination. Here's what the 128 bits mean and why v4 collisions are effectively impossible.

17 June 2026