Homoglyph Converter & Detector
Replace Latin letters with confusable Cyrillic/Greek lookalikes, or normalize spoofed text back to ASCII — see what phishing domains exploit.
About Homoglyph Converter & Detector
Homoglyph Converter swaps Latin letters for visually identical Cyrillic and Greek lookalikes — and normalizes spoofed text back to ASCII. It demonstrates exactly how IDN homograph phishing works and helps you test detection filters, using Unicode's official confusables data.
How to use Homoglyph Converter & Detector
- 1Paste or type your input into the box above — a sample is pre-filled so you can try it instantly.
- 2Set any options on offer (mode, key, format) to match what you need.
- 3The result appears the moment you type — no button to press, no waiting.
- 4Click Copy to grab the output — Homoglyph Converter & Detector keeps everything on your device.
Why use Homoglyph Converter & Detector?
- ✓Testing whether your anti-phishing or username filters catch confusable characters
- ✓Understanding how a domain like paypal.com can be spoofed with Cyrillic letters
- ✓Normalizing suspicious copy-pasted text back to plain ASCII
- ✓100% free with no sign-up, no watermark and no usage limits
- ✓Runs entirely in your browser — your text and keys are never uploaded, stored or logged
- ✓Works offline once loaded, with instant results and one-click copy
Frequently asked questions
What is a homoglyph attack?+
It substitutes a character with a different one that looks the same — for example Cyrillic а (U+0430) for Latin a (U+0061). Domains and usernames built this way appear legitimate to the eye, which is the basis of IDN homograph phishing.
Is this tool for attacking people?+
No — it is defensive and educational. Use the normalize direction to clean suspicious text and the convert direction to red-team your own spoof-detection filters.
Is it free to use?+
Yes — completely free with no sign-up, no account and no usage limits. There is no paywall, so you can encode, decode and convert as much as you like.
Is my data private and secure?+
Yes. This tool runs entirely in your browser using client-side JavaScript — your input is never uploaded to a server, stored or logged. Once the page has loaded you can use it offline, which makes it safe for tokens, keys and confidential data.
Related Developer tools
JSON to TypeScript Interface Generator
Paste JSON and get clean TypeScript interfaces instantly — nested objects become named interfaces, arrays of objects are merged with optional properties detected, unions inferred. 100% client-side.
● LiveIPv4 Subnet Calculator
Enter an IP and CIDR prefix to get the network, broadcast, mask, wildcard, host range and usable host count — the complete subnet breakdown, instantly.
● LiveCIDR to Subnet Mask Converter
Convert a CIDR prefix (/0–/32) to its dotted-decimal subnet mask and wildcard mask, and back again — with host counts for each prefix length.
● Live