Tool Matic Blog

Notes from building private, browser-based tools

Tutorials, privacy deep-dives, and engineering notes from the team behind the tools. Everything we ship runs locally — these are the ideas behind it.

3articles

8tags

0server uploads

100%local

A look at how browser-based utilities process everything locally, why that matters for privacy, and how to tell when a tool really runs client-side.

May 10, 2026 1 min read By Tool Matic team

AES-GCM is the only mode most apps should reach for. Here is why — and the three mistakes (ECB, nonce reuse, password-as-key) that break it.

Aug 29, 2026 11 min read

UUID v4 is random and great for privacy, while v7 is time-ordered and friendlier to databases. Here is how to pick the right one for your use case.

May 18, 2026 1 min read

Prefer the tools to the theory?

Everything we write about ships as a browser tool you can run and inspect.