Toolhub for Schools
Toolhub for classrooms
Toolhub is a set of small in-browser tools that students can use without creating an account, without being tracked, and without being redirected to ads or affiliate funnels. Every tool runs entirely in the browser, which means student input never leaves the school network — there is no backend to call.
If you teach in a primary, secondary or tertiary setting and need a quick utility (a regex tester, a colour converter, a Base64 encoder, a password generator for a security lesson), Toolhub is built to be safe to put on the projector and safe to send to a class.
Curriculum tie-ins
- Computer science: the regex tester for pattern matching, the Base64 encoder for data lessons, the hash generator for talking about integrity, the CIDR calculator for networking units.
- Design and digital media: the colour converter and colour picker for talking about colour models, the WCAG contrast checker for accessibility.
- Security awareness: the password generator for talking about entropy and password strength, the JWT decoder for showing what's actually inside a token.
- Maths and health: the percentage calculator, unit converter, and BMI calculator (the BMI page carries its own "not medical advice" notice).
Languages supported
Every tool is translated into 15 languages so students can work in their first language:
- English
- Deutsch (German)
- Español (Spanish)
- Français (French)
- Italiano (Italian)
- Português (Portuguese)
- Polski (Polish)
- 日本語 (Japanese)
- Nederlands (Dutch)
- Türkçe (Turkish)
- Bahasa Indonesia (Indonesian)
- Tiếng Việt (Vietnamese)
- हिन्दी (Hindi)
- Slovenčina (Slovak)
- Čeština (Czech)
What a class with Toolhub actually looks like
Three concrete classroom sketches, each built around a Toolhub tool:
Computer science: "What's actually in a JWT?"
A 30-minute lesson for a Year 12 or first-year-university intro to web security. Project the JWT decoder on the screen. Take a JWT from a real (sanitised) sample login response. Paste it. Watch the three sections — header, payload, signature — get split out and decoded in front of the class. Discuss: why is this readable to anyone? What does the signature actually do? What would happen if a student edited the payload to change "role": "user" to "role": "admin" — would the modified token still be valid? (No, because the signature wouldn't match.) Ends with a sketch of how a server validates a JWT it receives. Ten minutes of demo, twenty of discussion.
Design and media: "What's wrong with this colour pair?"
A 45-minute lesson for a design or accessibility unit. Open the WCAG contrast checker on the projector. Pull up the school website. Pick a heading colour and a background colour. Type them in. Watch the contrast ratio appear, and the WCAG AA / AAA pass/fail beside it. Discuss which pairs fail, why contrast matters (low-vision users, mobile screens in sunlight, projector glare), and how to fix the colours while keeping the brand recognisable. Students then audit a website of their choice and write up findings. Ten minutes of demo, thirty-five of student work.
Security awareness: "How strong is your password?"
A 20-minute lesson for a digital-citizenship or PSHE block. Use the password generator to demonstrate entropy: same length, very different randomness. Then show a target length where the same character set still produces a password that would take a modern attacker centuries to brute-force. Compare to a typical "Tr0ub4dor!" style password. Important framing: the goal is not to scare students about cybercrime — it's to give them an intuitive sense of why password length matters more than special characters. Ends with everyone changing one of their own passwords if they want to.
Working with your IT department
If your school IT department needs more than the trust signals below before approving a new site for student use, the package they typically ask for is:
- A short paragraph explaining what the site does and why it's classroom-relevant
- Confirmation it's ad-free (it is) and tracking-free (it is)
- The Google Safe Browsing and VirusTotal links (below)
- A self-host option if domain whitelisting is impractical (also below)
Most IT departments approve in under a week with that package. Some prefer the self-hosted option from day one, in which case the entire site can be mirrored on a school intranet without any external network calls during use.
Self-hosted option
If your school network blocks external sites or you'd rather have full control, the entire site is around 5 MB and works offline as a Progressive Web App. You can mirror it on a school intranet — it's a static folder of HTML, CSS and JavaScript with no build step required to serve, just put the files behind any web server.
Filter-friendly
Toolhub is designed to play nicely with school web filters:
- No embedded social media widgets.
- No chat widgets or live-chat overlays.
- No auto-redirects to other sites.
- No video or audio that auto-plays.
- SafeSearch-friendly content — no adult tools, no gambling, no crypto-bro affiliate placements.
Trust signals for IT admins
If your school's network filter requires verification before allowing access to a new domain, these are the public, third-party signals you can check:
- Google Safe Browsing: Verify Toolhub's status — Google's automated phishing/malware classifier. Toolhub is on the clean list.
- VirusTotal scan: View latest scan result — Independent third-party multi-engine scan (70+ antivirus engines).
Toolhub is also open source on GitHub — IT admins can inspect every line of code before approving the domain.
Contact for educators
If you're using Toolhub in a classroom and want to tell me about it, suggest a tool for your subject, or contribute a translation for a language we don't yet cover well, please get in touch via the contact page. Bulk-translation contributions from native speakers — especially for less-served languages — are very welcome.