/* Bootstrap collapse JS never runs: keep Home / Tools / About / Contact in the HTML. */ .dxp-header .navbar-toggler { display: none !important; } .dxp-header .navbar-collapse.collapse { display: flex !important; flex-wrap: wrap; align-items: center; } @media (max-width: 991.98px) { .dxp-header .navbar-collapse.collapse { flex-basis: 100%; flex-direction: column; align-items: flex-start; } }

Local-first · No signup · Android + web

Inspect Android builds and ship faster in the browser

DroidXP is a HappyMynds toolkit for Android and web developers. Drop an APK, paste a manifest, or decode a permission — most tools run in your tab so the file never leaves the machine.

Indexed Android, developer, security, and image desks · Local-first APK, permissions, manifests

What DroidXP is for

DroidXP is for people who ship Android apps and websites and need a fast, local check — not another account. Start with the APK Analyzer, Permissions Decoder, or Manifest Validator when you want to inspect a build before Play upload or sideload.

Local-in-browser matters because pre-release APKs and manifests are confidential. Where a tool can run in JavaScript, your file stays on the device. We document the exceptions (live APIs) on the tool page. Read the APK guide, the blog, or who builds this.

How we work

No signup — open a tool and work immediately
Local first — APKs and pasted XML stay in your tab when the tool can run offline
Honest limits — we say when a check is heuristic, not apktool
One studio — built by HappyMynds, not a multi-site dump

JSON formatters, color pickers, and converters live on the utility category pages — public, not the indexed set.

Android

APK Analyzer

Drop an APK to list ZIP entries, count DEX files, detect native .so libraries, and hash the file with Web Crypto. Local JSZip.…

APK String Extractor

Drop an APK to export raw strings.xml when present, or a UTF-8/UTF-16 scan of resources.arsc. Local JSZip. Not a localization s…

Android Manifest Validator

Paste text AndroidManifest.xml. DOMParser checks structure, package, application, uses-sdk, and launcher activity. Not binary A…

Android Permissions Decoder

Paste uses-permission lines and see protection level, group, and a plain-language note. Curated local list — not Play policy re…

ADB Command Generator

Form to copyable adb install, logcat, am start, and serial targeting. This page does not talk to your phone.

Android Intent URL Generator

Assemble intent:// links with scheme, package, extras, and S.browser_fallback_url. Local. Does not verify App Links.

Android Version Checker

Search a local Android version to API table (API 16–36 as of 31 Aug 2026). Not a device detector. Not Play distribution.

App Icon Generator

Canvas-resize one square image into Android (48–512) and iOS (20–1024) PNGs. Local. No mipmap folders, no adaptive-icon XML.

APK Signing Guide

Generate zipalign, apksigner, keytool, and jarsigner command blocks. Local. No keystore upload. Play App Signing still re-signs…

Android Deep Link Tester

Paste https, custom-scheme, or intent:// URLs. Local parse and am start lines. Does not verify App Links or open the app.

PWA Manifest Generator

Form fields to a Web App Manifest. Local JSON only. Does not register a service worker or verify icon files exist.

Developer

Regex Tester

new RegExp(pattern, flags) with live highlights, match table, and replace preview. ECMAScript only. Local.

HTTP Request Builder

Method, URL, query, headers, body → bash-quoted cURL and await fetch(). Local text only. No request is sent.

Service Worker Generator

Generate service-worker.js: precache, network-first / cache-first / SWR, plus a register() snippet. You host it.

Security

JWT Decoder

Split a JWS on dots, base64url-decode header and payload, show iat/nbf/exp. Local. Does not verify signatures.

.htaccess Generator

Toggle HTTPS, www/apex, gzip, cache, SPA fallback, UTF-8, -Indexes, and .env/.git blocks. Apache 2.4 text only. Not Nginx.

CORS Header Generator

Form → Access-Control-* blocks for Apache or Nginx. One origin. Does not send OPTIONS or audit your API.

Image

Screenshot to Code

Canvas sample: dimensions, quantized colors, luminance bands, plus a header/main/footer scaffold. No vision model. No OCR.

Image Metadata Viewer

Local JSON: EXIF/IPTC via on-demand exifr, PNG tEXt/tIME/pHYs, GIF header. GPS may appear. Not a stripper.

Productivity

Fake Data Generator

1–100 fixture rows: names, example.com emails, 555 phones. CSV/TSV/JSON. Local word lists. Not real people.

From the blog

All posts

Permissions that cause Play review

Decode a pasted list before leftover SMS or All files access hits the console.

versionCode vs versionName vs applicationId

The three identifiers that still fail Play uploads.

Exported components after Android 12

Inspect intent-filters without Studio — and what our validator skips.

Featured guides

How to analyze APK files

Inspect permissions and versions before install or Play upload.

Browser tools vs apktool / aapt

When a tab is enough, and when you still need the SDK.

ADB and intents without Studio

Copy the command here; run it on a device that has the right applicationId.

View all guides

Frequently asked questions

Are DroidXP tools really free?

Yes. Every tool is free and works without an account. Use what you need; there is no paywall on the analyzer, decoder, or validator.

Do you upload my files or API keys?

Many tools process input locally in your browser. Each tool page states whether network calls occur. Read our privacy guide for details.

Who maintains DroidXP?

DroidXP is designed and developed by HAPPYMYNDS. We add tools based on developer feedback — contact us with suggestions.

Can I suggest a new tool?

Absolutely. Email us via the contact page with a short description of the workflow you are trying to solve.