Security and Privacy Model
DevPouch is designed around practical browser-local processing for developer utilities. This page explains what that means, what it does not mean, and how to handle sensitive data carefully.
What local processing means
For tools such as JSON formatting, Base64 encoding and decoding, URL encoding, UUID generation, password generation, timestamp conversion, and hashing, the transformation is performed by JavaScript running in your browser. DevPouch does not need to send that tool input to a backend service to produce the output.
Local processing is useful because it reduces unnecessary server-side exposure for tool input and keeps tools fast. It does not mean every input is automatically safe to paste into every webpage.
What local processing does not mean
This page is informational and is not a security audit. Local processing does not remove risks from your device, browser, extensions, clipboard, screenshots, shared screen sessions, malware, or network policies. If your organization requires approved internal tools for secrets or production data, follow that policy.
Inputs to treat carefully
- JWTs, bearer tokens, session cookies, API keys, private keys, and other credentials.
- Passwords and generated passwords before they are stored in a trusted password manager.
- Private JSON payloads containing customer data, employee data, financial data, internal identifiers, or production records.
- Base64 strings or URLs that may hide sensitive values in encoded form.
Tool-specific notes
The JWT decoder decodes header and payload JSON for inspection only. Decoding a JWT is not signature verification and does not prove the token is trustworthy.
The password generator is designed to generate values locally using browser cryptography where implemented. DevPouch does not store generated passwords; copy them into a trusted password manager if you need to keep them.
Hash tools produce one-way digests, but hashing is not encryption and is not automatically secure storage. Password storage requires dedicated password hashing algorithms, salts, and system-specific controls.
Reporting concerns
For bugs, unclear privacy wording, or security concerns, use the Contact page or email devpouch@gmail.com.