PixelDock
← All guides

Hashing, Base64 and random identifiers are different tools

Choose the right operation without treating encoding or a UUID as a security boundary.

Encoding is reversible representation

Base64 turns bytes into a text representation. It is useful when a protocol expects text, but it does not hide the original content. URL component encoding has a different purpose: protecting special characters inside one component, not validating an entire URL. PixelDock encodes and decodes UTF-8 so non-English text and emoji round-trip.

A hash is sensitive to every byte

SHA-256, SHA-384 and SHA-512 generate fixed-length digests from the exact UTF-8 input. A trailing newline changes the answer. For the text abc without a newline, SHA-256 begins ba7816bf8f01cfea. A matching hash can support an integrity comparison when the reference digest is trustworthy; it does not prove that a file is safe or identify who created it.

Do not store passwords with plain SHA-256

A fast general-purpose hash is not a password storage design. Production password storage needs an appropriate salted password-hashing scheme and a broader account-security design. The text hash tool is intended for digest calculation, not creating a login database.

Randomness is not authorization

The password generator uses browser cryptographic randomness, includes each selected character group and shuffles the result. UUID v4 uses browser Web Crypto as well. UUIDs are identifiers; an application must still check access permissions. Results stay in page memory, while copying them may place them in the operating system clipboard. Use a password manager for storage and avoid sharing real secrets in feedback.

References

Web Crypto API documentation

Put it into practice.

Open the tool