Free Online Tools Blog
Free online tools, explained properly. In-depth guides, tutorials and troubleshooting walkthroughs you can follow step by step in your browser — no signup, no download, no paywall.
Start with the newest guides
The three most recently published tool guides, newest first.
URL Encoding Explained: Percent-Encoding, %20 and Common Bugs
How a character becomes %XX, which characters a URL lets you use as they are, why encodeURIComponent and encodeURI give different answers, when a…
Base64 Explained: How Encoding and Decoding Really Work
How Base64 actually turns three bytes into four characters, why there are two alphabets and when each one matters, what the = padding is for, why "Bas…
JWT Explained: How to Decode and Debug JSON Web Tokens
What a JSON Web Token actually contains, how to decode one in your browser without leaking it, which claims decide whether an API accepts it, why deco…
Categories
Search the guides
Showing all 16 guides
No guides match that search.
URL Encoding Explained: Percent-Encoding, %20 and Common Bugs
How a character becomes %XX, which characters a URL lets you use as they are, why encodeURIComponent and encodeURI give different answers, when a space is + and when it is %20, and how to track down the double encoding behind a %2520.
Base64 Explained: How Encoding and Decoding Really Work
How Base64 actually turns three bytes into four characters, why there are two alphabets and when each one matters, what the = padding is for, why "Base64 encoded" is never a security measure, and how to diagnose output that decodes to gibberish.
JWT Explained: How to Decode and Debug JSON Web Tokens
What a JSON Web Token actually contains, how to decode one in your browser without leaking it, which claims decide whether an API accepts it, why decoding is not verifying, and the mistakes that put secrets in a payload anyone can read.
How to Read a DMARC Report (Without Drowning in XML)
What a DMARC aggregate report actually contains, how to read the XML row by row, how to tell your own forgotten senders from real spoofing, why forwarders look like attackers, and how to get safely from p=none to p=reject.
404 vs 410: What Each One Tells Google About a Dead Page
What a 404 and a 410 each tell a crawler, how fast each one leaves the index, when to redirect instead of returning either, and why a soft 404 quietly costs you more than both of them put together.
Why Your SPF Record Keeps Failing (and How to Fix It)
How to read your own SPF record line by line, why the ten-lookup limit breaks it silently, why forwarded mail fails even when the record is correct, and how to fix a record that keeps returning fail or softfail.
301 vs 302 Redirects: Which to Use and What SEO Sees
When to use a 301 and when a 302, what each one does to your rankings and to the browser cache, the chains and loops that quietly cost you traffic, and how to check which redirect a URL actually returns.
How to Fix an Expired SSL Certificate (Step by Step)
Your visitors are seeing a certificate expired warning. Here is how to confirm it is really expiry, renew and install the new certificate, work out why automatic renewal stopped, and make sure it does not happen again.
CNAME vs A Record: Which to Use and the Apex Rule
When to use a CNAME and when to use an A record, why your root domain cannot be a CNAME, what the alias records offered by modern DNS providers actually do, and how to check what you have today.
Why DNS Changes Take Time: TTL and Propagation Explained
A DNS change is not slow, it is cached. Understand what TTL controls, which caches hold the old answer, how long you actually have to wait, and how to schedule a change so nobody sees an outage.
HTTP Security Headers: A Complete Guide to CSP, HSTS and the Rest
A handful of response headers decide whether a browser will run injected scripts, frame your pages, or fall back to plain HTTP. This guide explains what each one does, which ones are worth the effort, and how to deploy a strict CSP without breaking anything.
HTTP Status Codes: A Complete Guide to Every Response Code
Every request your browser makes comes back with a three-digit number. This guide explains what each class means, which codes you will actually meet, how redirects and errors affect SEO, and how to check the real status of any URL.
API Rate Limiting: A Complete Guide to Limits, Bursts and Backoff
Rate limits keep an API usable when demand spikes. This guide covers the four algorithms worth knowing, how to choose a limit you can defend, the headers clients need, and how to back off correctly when you receive a 429.
SPF, DKIM and DMARC: A Complete Guide to Email Authentication
Learn how SPF, DKIM and DMARC work together to stop email spoofing. Read each DNS record line by line, understand DMARC alignment, and roll out a reject policy without losing legitimate mail.
SSL Certificate Checker: A Complete Guide to Checking SSL/TLS Certificates
Learn how to use an SSL certificate checker to inspect any domain's SSL/TLS certificate: issuer, validity dates, days remaining, the names it covers, and how to avoid expired certificates.
DNS Lookup: A Complete Guide to Querying Domain Records
Learn how to use a DNS lookup tool to query A, AAAA, MX, TXT, NS and other records for any domain. Understand every record type, read TTL, run reverse DNS, and troubleshoot DNS problems fast.
Every guide pairs the explanation with a free tool, so you can run the check on your own domain while you read.
Clear, skimmable reference for the questions that come up mid-task, without wading through documentation.
Practical hardening advice you can apply the same day, written for real sites rather than ideal ones.
Guides are revised as standards and browser behaviour change, so the advice does not quietly go stale.
Free guides and tutorials for every tool on the site
The BuildToolForge blog is where we publish in-depth, step-by-step guides for the free online tools on this site. Every guide is written to be genuinely useful whether you are meeting a concept for the first time or you are an experienced engineer who needs a quick, accurate reference.
Our guides walk through real tasks step by step: how to run a check, how to read and interpret the result, what each field means, and the problems that come up most often along with how to fix them. There is no fluff and no paywall — just clear explanations you can act on immediately.
Each article pairs the explanation with a free tool you can use straight away on your own domain or site, so you can try what you have just read without signing up for anything.
New articles are added as we expand the toolset, so bookmark this page or come back regularly. If there is a topic or a tool you would like us to cover, let us know through the contact page.