Punycode.tools

About Punycode.tools

Punycode.tools is a 100% free, browser-based toolkit for converting between Punycode and Unicode and inspecting internationalized domain names (IDNs). No sign-up, no paywall, no tracking — paste a domain and get an instant, accurate answer.

A perfect Punycode converter

We implement the IDNA / RFC 3492 spec faithfully, so the conversions you get here match what browsers and DNS resolvers actually see. Every character is decoded, scripts are detected per-label, and confusable characters are flagged — all client-side, in real time.

Why this matters

  • Phishing defense. A domain that looks like apple.com may actually be xn--pple-43d.com, using a Cyrillic letter to fool the eye. Decoding it reveals the trick instantly.
  • Safer browsing & link auditing. Verify suspicious links from emails, chats, or ads before you click.
  • Brand protection. Security teams can audit lookalike domains targeting their company or customers.
  • Developer correctness. Test how your app handles IDN inputs, email addresses with Unicode local parts, and edge-case TLDs.

Buying or registering a domain?

If you're picking up a Unicode domain — or evaluating one on the secondary market — always check its Punycode form first. You'll want to know:

  • • How registrars and DNS will actually store it (the xn-- form).
  • • Whether browsers will display it as Unicode or fall back to raw Punycode (mixed-script labels often fall back, killing the visual appeal).
  • • Whether it collides with existing trademarks via confusable characters — a fast way to get a domain seized or blocked.
  • • Whether the seller is offering a homograph of a famous brand (a red flag, not a bargain).

Run any candidate domain through the converter or bulk tool before you spend a cent.

Private by design

Everything runs locally in your browser. We don't log your queries, don't perform DNS lookups against the domains you inspect, and don't share data with third parties.

This tool is for Punycode conversion and education. It does not perform DNS lookups or visit the inspected domains.