Guides & tutorials
Short walkthroughs to get more out of each tool.
RSSHTML entity encoding in APIs and templates
Escape user content before embedding into HTML or JSON string fields.
HTML · security · XSS
HMAC signing for webhooks
Use a shared secret and a stable algorithm—verify on the server, never trust client-side checks alone.
HMAC · security · webhooks
Best Practices for Secure Password Generation
Why entropy and character diversity matter for your security.
Security · Passwords · Privacy
How to decode JWT safely
Inspect tokens locally first; verify signatures only on the server.
JWT · security · OAuth