ZeyroVault Blog: Security Guides & Developer Tutorials
Practical security guides and developer tutorials covering encryption, hashing, tokens, and privacy-first browser tooling for engineers who build and ship.
Start with a task
Ten end-to-end guides, each paired with the browser tool that finishes the job. Pick the task, not the tool.
- Task guide 01Compress an Image for Email
Most email rejections come from dimensions, not quality. Resize first, keep JPEG for photos, and check the text that must stay readable.
- Task guide 02Verify a SHA-256 Checksum on Windows
Windows ships with two ways to hash a file. Use Get-FileHash, compare the full digest, and know which mismatches are real before you run the installer.
- Task guide 03Decode JWT From Error Logs
A failed request usually leaves the token in a log line. Decode it locally to see exp, iat, iss, and aud before touching any code - and never paste it into a random decoder.
- Task guide 04Encrypt a File Before You Upload It
Provider-side encryption protects the storage infrastructure, not your file from the provider or a stolen session. Encrypt locally, keep the key separate, and upload only ciphertext.
- Task guide 05JSON Diff vs Text Diff: Which to Use
A text diff on JSON screams about reordered keys and reformatting. A semantic JSON diff tells you what actually changed. Here is when to use each.
- Task guide 06CSV to JSON Converter Guide
CSV looks simple until a field contains a comma, a newline, or a leading equals sign. Learn the RFC 4180 rules and convert data without losing anything.
- Task guide 07Markdown Tables: How to Create and Format Them
Tables are a GFM extension, not part of original Markdown. Three lines of syntax cover most cases; alignment is one colon in the separator row.
- Task guide 08Cron Expression Guide: Five Fields, Next Runs
A cron expression is five fields that look obvious until one of them is wrong. Learn the syntax, the day-of-week trap, and how to preview the next runs before you deploy.
- Task guide 09QR Code Printing: Size, Contrast, Materials
A QR code that fails to scan on paper is a broken link. Get the minimum size, contrast, error correction, and quiet-zone rules right before sending the file to print.
- Task guide 10UUID v7 Generator: Time-Ordered IDs
v4 scatters inserts across the key space; v7 keeps them near the current time. The visible timestamp is the trade-off, and it matters if your IDs are user-visible.
Compress an Image Without Uploading It
Most free compressors upload the file before they shrink it. This workflow keeps the image on your device and still gets it small enough to send.
Read moreVerify a SHA-256 Checksum on Windows
Windows ships with two ways to hash a file. Use Get-FileHash, compare the full digest, and know which mismatches are real before you run the installer.
Read moreCompress an Image for Email
Most email rejections come from dimensions, not quality. Resize first, keep JPEG for photos, and check the text that must stay readable.
Read moreEncrypt a File Before You Upload It
Provider-side encryption protects the storage infrastructure, not your file from the provider or a stolen session. Encrypt locally, keep the key separate, and upload only ciphertext.
Read moreHow to Decrypt AES-256-GCM Locally
Decrypting AES-256-GCM is straightforward when you have the password and the right metadata. Here is the exact workflow—and the mistakes that break decryption.
Read morebcrypt vs Argon2: Password Hashing
bcrypt has protected passwords for decades; Argon2 is the modern, memory-hard recommendation. Here is how they compare and when to use each in 2026.
Read moreCSS Minifier Guide: Shrink Stylesheets
CSS is mostly whitespace and comments by weight. A minifier removes both — and a good one knows exactly what must survive.
Read moreCertificate Decoder Guide: Read X.509 Details
Every TLS handshake starts with a certificate. Decode the fields that matter: subject, issuer, validity, public key, and fingerprints — locally.
Read moreRSA Key Pair Guide: Generate PEM Keys
Public and private keys, PEM headers, key sizes, and storage habits. Generate a pair locally and understand exactly what the files mean.
Read moreCSV to JSON Converter Guide
CSV looks simple until a field contains a comma, a newline, or a leading equals sign. Learn the RFC 4180 rules and convert data without losing anything.
Read moreColor Converter Guide: HEX, RGB, HSL
HEX, RGB, and HSL are three views of the same color. Know what each format represents, when alpha matters, and how to check contrast before you ship.
Read moreCron Expression Guide: Five Fields, Next Runs
A cron expression is five fields that look obvious until one of them is wrong. Learn the syntax, the day-of-week trap, and how to preview the next runs before you deploy.
Read moreRegex Tester Guide: Test Patterns Locally
Most regex failures are visible the moment you see the matches: wrong flags, greedy quantifiers, or a group you never intended. Test locally and read the actual matches before blaming the pattern.
Read moreQR Code Printing: Size, Contrast, Materials
A QR code that fails to scan on paper is a broken link. Get the minimum size, contrast, error correction, and quiet-zone rules right before sending the file to print.
Read moreDeveloper Security Tools: Zero-Knowledge Guide
The tools you reach for with sensitive data should not see that data. A guide to the zero-knowledge security toolbox: what each tool does, when to use it, and how to verify it.
Read moreBatch Image Compression: A Local Workflow Guide
Email limits, upload forms, and page speed all punish oversized images. Compress a whole folder in your browser - no upload, no account, no quality guessing.
Read moreJSON Diff vs Text Diff: Which to Use
A text diff on JSON screams about reordered keys and reformatting. A semantic JSON diff tells you what actually changed. Here is when to use each.
Read moreDecode JWT From Error Logs
A failed request usually leaves the token in a log line. Decode it locally to see exp, iat, iss, and aud before touching any code - and never paste it into a random decoder.
Read moreEncrypt .env Files Before Commit
Committing a plaintext .env leaks every secret in your repository. If a copy must live in git, encrypt it first - here is the safe workflow.
Read moreVerify Downloaded ISO Checksums: Linux, Windows, and macOS
A corrupted ISO can fail hours into an install. Verify the SHA-256 checksum before you burn or write it, and never upload the file to do it.
Read moreMarkdown Tables: How to Create and Format Them
Tables are a GFM extension, not part of original Markdown. Three lines of syntax cover most cases; alignment is one colon in the separator row.
Read moreBase64 Data URIs: Use and Optimize
A data URI removes one HTTP request for a tiny icon and bloats the page for anything larger. The line between the two sits somewhere around a few kilobytes.
Read moreUUID v7 vs ULID: Sortable IDs Compared
Both fix the same problem: random IDs scatter index inserts, time-ordered IDs do not. UUID v7 fits existing UUID parsing; ULID is a compact Base32 string. Pick what your stack already understands.
Read moreAES-GCM vs ChaCha20-Poly1305
Both encrypt and authenticate in one pass. AES-GCM wins on hardware-accelerated chips; ChaCha20-Poly1305 wins in pure software and on small devices. The rest of the decision is your platform.
Read morebcrypt vs scrypt: Hashing Compared
Plain SHA hashes are too fast for passwords. bcrypt raises the CPU cost per guess; scrypt adds a memory bill that GPU rigs cannot easily pay. The practical ranking today is Argon2id, scrypt, then bcrypt.
Read moreJWT Expiration & Clock Skew: exp, iat, nbf
When a JWT fails validation, the claims usually say why. exp, iat, and nbf are plain Unix seconds, so you can decode them and compare against the server clock before touching any code.
Read moreSHA-256 vs SHA-512: Choosing the Right Hash
Publishers usually give you a SHA-256 checksum, so that is what you verify. SHA-512 exists for systems that want a 512-bit digest or hash faster on 64-bit CPUs. The deciding factor is usually your ecosystem, not security.
Read moreBase64 vs Base64URL: Key Differences
Standard Base64 breaks inside URLs: + reads as a space, / splits paths. Base64URL swaps in - and _, which is why JWT segments use it. The difference is small, but it decides whether your data round-trips.
Read moreHMAC-SHA256 API Signing: Sign Requests
Webhooks and API clients use HMAC to prove a message came from someone holding the secret. The details that break integrations are bytes, timing, and where the secret lives.
Read moreUUID v7 Generator: Time-Ordered IDs
v4 scatters inserts across the key space; v7 keeps them near the current time. The visible timestamp is the trade-off, and it matters if your IDs are user-visible.
Read moreEncrypt Text Before Sending to ChatGPT
Anything you paste into an AI assistant goes to a service that may log or train on it. Encrypting first keeps source code, customer data, and plans unreadable to everyone but you.
Read moreUnix Timestamp: A Developer's Guide
A mismatch between seconds and milliseconds in timestamp handling can cause data integrity issues scheduling failures and security vulnerabilities in production systems.
Read moreUUID Versions Explained: A Complete Guide
Understanding UUID versions, their use cases, and how to generate them securely in the browser.
Read moreCode Review with Diff Tools: Best Practices
A diff is a line-by-line comparison of two versions of a file. In code review, read the added logic first: whitespace and reordering are noise, while a changed operator or a flipped condition is the bug.
Read moreBuilding a Complete Password Encryption System
From user password to encrypted data storage. A complete solution for secure applications.
Read moreJSON Formatter: A Developer's Guide to RFC 8259
Most online JSON formatters log every piece of data that passes through their servers. For developers handling sensitive API responses, this creates a significant security risk.
Read moreWhy Privacy Matters in QR Code Generation
Most QR code generators send your data to their servers. Learn why this is a security risk and how to generate QR codes privately with zero-knowledge architecture.
Read moreZero-Knowledge Architecture: Protecting Data
An in-depth look at zero-knowledge architecture and why ZeyroVault Tools cannot see your data.
Read more