Skip to content
ForgePlug — Logo
developer100% Browser-BasedUpdated Jul 2026

URL Toolkit

The most comprehensive URL workspace available. Analyze every part of a URL with live visual inspection. Encode and decode with auto-detect. Edit query parameters in a visual table. Build URLs from components. Generate UTM marketing URLs. Validate URL structure with friendly error messages. Analyze security concerns. Generate QR codes. All processing happens entirely in your browser — nothing leaves your device.

Enter a URL to begin

·Drop a text file anywhere

Live URL Inspector

Every part of your URL, color-coded and clickable.

Enter a URL above to see its parts

Keyboard Shortcuts

Encode URLCtrl+Enter
Decode URLCtrl+Shift+Enter
ClearCtrl+L
Clear inputEsc

Related Tools

Other tools you might find useful.

Regex Tester & BuilderNew

Test, debug, explain and build regular expressions visually with live highlighting, token explanations, and a built-in debugger.

JSON Formatter & ValidatorNew

Format, validate, and beautify JSON data instantly.

JSON ValidatorNew

Validate JSON with human-friendly error messages and instant feedback.

JSON DiffNew

Compare JSON files visually. Highlight additions, removals and modifications with side-by-side and inline comparison.

JWT DecoderNew

Decode and inspect JSON Web Tokens securely in your browser. View headers, payloads, claims, and expiration status.

Base64 Encoder & DecoderNew

Encode and decode Base64 instantly with Unicode, file, and live mode support.

Frequently Asked Questions

What is URL encoding and why is it needed?
URL encoding (also known as percent-encoding) replaces special characters in a URL with a '%' followed by two hexadecimal digits. It's needed because URLs can only contain a limited set of ASCII characters. Spaces, Unicode characters, and special symbols like ? # & = must be encoded to ensure the URL is transmitted correctly over the internet.
Is my data safe when using this URL Toolkit?
Yes, 100%. The URL Toolkit runs entirely in your browser using JavaScript. No data is ever sent to any server. All parsing, encoding, decoding, validation, and QR code generation happens locally on your device. Your URLs never leave your computer.
What's the difference between encodeURIComponent and encodeURI?
encodeURIComponent encodes special characters including & ? = # / : ; and @, making it safe for embedding in query parameter values. encodeURI is less aggressive — it preserves characters that have special meaning in URLs (like / ? & #) and is used for encoding complete URLs. Always use encodeURIComponent for user-supplied values going into query parameters.
What does URL decoding do?
URL decoding converts percent-encoded characters back to their original form. For example, %20 becomes a space, %3A becomes a colon, and %2F becomes a forward slash. The decoder converts these encoded sequences back to the characters they represent so you can read the actual values.
How does the URL validator detect issues?
The validator checks for: missing or invalid protocol, malformed URL structure, invalid port numbers (must be 1-65535), illegal characters (spaces, angle brackets, backslashes), broken percent-encoding sequences, duplicate query parameters, and missing domain names. Each issue includes a friendly explanation to help you fix it.
What is the URL security analyzer looking for?
The security analyzer checks for: HTTP vs HTTPS usage, suspicious encoded characters (null bytes, XSS patterns), open redirect indicators (redirect, url, next parameters), unsafe query values (script tags, javascript: protocol), duplicate parameters, potential phishing domain patterns, and mixed content warnings.
What are UTM parameters?
UTM parameters are tags added to URLs to track marketing campaign performance. The five standard parameters are: utm_source (traffic source like google or newsletter), utm_medium (marketing medium like cpc or email), utm_campaign (campaign name), utm_term (paid search keywords), and utm_content (differentiates similar content). Google Analytics and other platforms use these to attribute traffic.
Can I use the URL Builder for mobile app deep links?
Yes! The URL Builder supports any protocol scheme, including custom app schemes like myapp://, myapp://, or universal links. Simply enter your custom protocol in the Protocol field and build the URL as usual.
What does the QR code generator use?
The QR code generator uses the qrcode library to generate QR codes directly in your browser. You can download the QR code as a PNG image or SVG vector file. All generation happens locally — no data is sent to any third-party service.
How do I use the Query Parameter Editor?
The Query Parameter Editor displays all query parameters in a clean table with key-value pairs. You can: edit any value inline by clicking on it, add new parameters, delete existing ones, duplicate parameter rows, and reorder parameters by dragging. The URL automatically rebuilds as you make changes.
What is a URL fragment and how is it different from query parameters?
A URL fragment (the part after #) is used for client-side navigation and is never sent to the server. Query parameters (the part after ?) are sent to the server as part of the HTTP request. Fragments are often used for scrolling to a specific section of a page or storing client-side state in single-page applications.
What does 'Auto Detect' do in the URL input?
Auto Detect analyzes whether the input is encoded or not. If it detects percent-encoded characters, it labels the URL as 'Encoded' and offers to decode it. If it detects double-encoding (%25 followed by hex digits), it warns about double encoding. This helps you understand the current state of your URL and decide what processing is needed.
How do I use the Bulk Mode?
Bulk Mode allows you to process multiple URLs at once. Paste URLs separated by newlines, commas, or semicolons. You can encode all URLs or decode all URLs with a single click. The results are displayed in a table and can be exported as TXT or JSON.
Does this tool work offline?
Once the page has loaded, yes! Since all processing happens locally in your browser, the core functionality works even without an internet connection. The QR code generation requires the qrcode library, which is loaded on first visit and then cached by your browser.
What makes ForgePlug's URL Toolkit different from other URL encoders?
The URL Toolkit is a complete URL workspace, not just a simple encoder. It combines URL inspection, encoding/decoding, validation, security analysis, query parameter editing, URL building, UTM parameter generation, QR code generation, URL explanation, and bulk processing — all in one interface with live updates. Every operation runs in your browser with zero server dependencies.
4.8 · Trusted by Developers

Frequently Asked Questions

Everything you need to know about encoding, decoding, and analyzing URLs

What is URL encoding and why is it needed?
URL encoding (also known as percent-encoding) replaces special characters in a URL with a '%' followed by two hexadecimal digits. It's needed because URLs can only contain a limited set of ASCII characters. Spaces, Unicode characters, and special symbols like ? # & = must be encoded to ensure the URL is transmitted correctly over the internet.
Is my data safe when using this URL Toolkit?
Yes, 100%. The URL Toolkit runs entirely in your browser using JavaScript. No data is ever sent to any server. All parsing, encoding, decoding, validation, and QR code generation happens locally on your device. Your URLs never leave your computer.
What's the difference between encodeURIComponent and encodeURI?
encodeURIComponent encodes special characters including & ? = # / : ; and @, making it safe for embedding in query parameter values. encodeURI is less aggressive — it preserves characters that have special meaning in URLs (like / ? & #) and is used for encoding complete URLs. Always use encodeURIComponent for user-supplied values going into query parameters.
What does URL decoding do?
URL decoding converts percent-encoded characters back to their original form. For example, %20 becomes a space, %3A becomes a colon, and %2F becomes a forward slash. The decoder converts these encoded sequences back to the characters they represent so you can read the actual values.
How does the URL validator detect issues?
The validator checks for: missing or invalid protocol, malformed URL structure, invalid port numbers (must be 1-65535), illegal characters (spaces, angle brackets, backslashes), broken percent-encoding sequences, duplicate query parameters, and missing domain names. Each issue includes a friendly explanation to help you fix it.
What is the URL security analyzer looking for?
The security analyzer checks for: HTTP vs HTTPS usage, suspicious encoded characters (null bytes, XSS patterns), open redirect indicators (redirect, url, next parameters), unsafe query values (script tags, javascript: protocol), duplicate parameters, potential phishing domain patterns, and mixed content warnings.
What are UTM parameters?
UTM parameters are tags added to URLs to track marketing campaign performance. The five standard parameters are: utm_source (traffic source like google or newsletter), utm_medium (marketing medium like cpc or email), utm_campaign (campaign name), utm_term (paid search keywords), and utm_content (differentiates similar content). Google Analytics and other platforms use these to attribute traffic.
Can I use the URL Builder for mobile app deep links?
Yes! The URL Builder supports any protocol scheme, including custom app schemes like myapp://, myapp://, or universal links. Simply enter your custom protocol in the Protocol field and build the URL as usual.
What does the QR code generator use?
The QR code generator uses the qrcode library to generate QR codes directly in your browser. You can download the QR code as a PNG image or SVG vector file. All generation happens locally — no data is sent to any third-party service.
How do I use the Query Parameter Editor?
The Query Parameter Editor displays all query parameters in a clean table with key-value pairs. You can: edit any value inline by clicking on it, add new parameters, delete existing ones, duplicate parameter rows, and reorder parameters by dragging. The URL automatically rebuilds as you make changes.
What is a URL fragment and how is it different from query parameters?
A URL fragment (the part after #) is used for client-side navigation and is never sent to the server. Query parameters (the part after ?) are sent to the server as part of the HTTP request. Fragments are often used for scrolling to a specific section of a page or storing client-side state in single-page applications.
What does 'Auto Detect' do in the URL input?
Auto Detect analyzes whether the input is encoded or not. If it detects percent-encoded characters, it labels the URL as 'Encoded' and offers to decode it. If it detects double-encoding (%25 followed by hex digits), it warns about double encoding. This helps you understand the current state of your URL and decide what processing is needed.
How do I use the Bulk Mode?
Bulk Mode allows you to process multiple URLs at once. Paste URLs separated by newlines, commas, or semicolons. You can encode all URLs or decode all URLs with a single click. The results are displayed in a table and can be exported as TXT or JSON.
Does this tool work offline?
Once the page has loaded, yes! Since all processing happens locally in your browser, the core functionality works even without an internet connection. The QR code generation requires the qrcode library, which is loaded on first visit and then cached by your browser.
What makes ForgePlug's URL Toolkit different from other URL encoders?
The URL Toolkit is a complete URL workspace, not just a simple encoder. It combines URL inspection, encoding/decoding, validation, security analysis, query parameter editing, URL building, UTM parameter generation, QR code generation, URL explanation, and bulk processing — all in one interface with live updates. Every operation runs in your browser with zero server dependencies.

Share this tool

Share
Runs in your browser100% privateNo data uploaded