No upload
Files are read through a local File handle and hashed in this tab. There is no endpoint to post them to.
Client-side utilities
Verify files. Clean text. Nothing leaves your browser.
Rosehip is a handful of small tools for the checks you do every week: reading a SHA-256 digest, formatting a JSON blob, decoding a Base64 string. Every byte is processed locally — there is no upload, no account and no telemetry.
Tools
Everything runs in this tab. Reloading clears all state.
SHA-256 file checksum
Pick a file or drop it here. Ordinary files are hashed with the browser's native Web Crypto; anything above 256 MB is streamed in 8 MB chunks by a small built-in SHA-256 so memory stays flat.
idle
JSON format and validate
Paste JSON below. Formatting keeps key order; validation reports the line and column of the first syntax error.
idle
Base64 encode and decode
Text is converted as UTF-8, so non-ASCII characters survive both directions. The URL-safe alphabet replaces + and / and omits padding.
idle
URL encode and decode
Encodes a single component with encodeURIComponent, which escapes &, =, ? and #. Use it for query values, not for a whole URL.
idle
Text utilities
Line-based operations on pasted text. Counts update as you type, everything else applies to the input and writes the result below.
Why it works offline
Three properties, no fine print.
Small and plain
No framework, no build step, no third-party script. The page ships one stylesheet and one JavaScript file.
Nothing to sign up for
No accounts, no cookies, no analytics, no server-side state. Close the tab and the session is gone.
A matching checksum proves that two files are identical. It says nothing about who published the file or whether it is safe to run — that part is still up to you.