5 Password Mistakes That Will Get Your Users Hacked Password security looks simple. Set a minimum length, require a number and special character, done. Except it isn't. Most password requirements actively make things worse. Here's what's actually h...

YAML and JSON are both human-readable data serialisation formats — but they're used in very different contexts, and they have different strengths. Knowing when to reach for each one and how to convert between them saves time and avoids subtle bugs. ...

SQL is the language that powers most of the world's data — and it is also one of the most commonly written in the least readable way. A query that runs correctly often looks like this in the wild: sql SELECT u.id,u.name,o.total FROM users u JOIN ord...

Every database row needs an identifier. Two strategies dominate: auto-incrementing integers and UUIDs. Each has clear strengths, and choosing between them affects your API security, database performance, and distributed system design. Auto-Increment...

CSS gradients have come a long way since the early days of browser-specific prefixes. Today, with linear-gradient, radial-gradient, and conic-gradient all widely supported, you can create smooth colour transitions that previously required image asset...

HTML minification is one of those optimisations that sounds boring until you see the numbers. Let's look at what it actually removes and what savings are realistic. What minification removes A standard HTML minifier targets four categories: 1. Whi...

Base64 encoding comes up everywhere — JWTs, email attachments, CSS data URLs, API payloads. Here's a concise reference for what it is, how it works, and when to actually use it. What Problem Does Base64 Solve? Binary data images, files, arbitrary b...

Performance optimisation sounds daunting — profilers, flamegraphs, weeks of refactoring. But most sites have a handful of quick wins that take minutes, not days. Here are five that any developer can apply right now. 1. Minify your JavaScript files ...

Embedding images directly into HTML and CSS using Base64 encoding is a technique every web developer encounters eventually — especially when working with email templates, offline apps, or API payloads. This guide walks through the practical side of h...

CSS gradients let you create smooth colour transitions entirely in the browser — no images, no SVGs, no external dependencies. The syntax trips people up at first, but once you understand the model, you can build backgrounds, borders, buttons, and de...

The Problem JSON Schema Solves APIs receive bad data. A field expected to be an integer arrives as a string. A required field is missing. An email field contains "not-an-email". Without validation, these problems surface deep inside your application...

You scan QR codes every day, but have you ever looked at one and wondered what the individual squares actually mean? QR codes look like random noise, but every element has a defined purpose. Understanding the structure helps you make smarter choices ...

If you have ever squinted at a website trying to read light grey text on a white background, you have experienced poor color contrast. It is uncomfortable for everyone. For people with low vision, color blindness, or cognitive disabilities, it makes ...

Hash functions are everywhere in software: passwords, file integrity checks, digital signatures, caches, and data structures. Most developers use them without fully understanding what's happening under the hood. This article explains the key hash alg...

If you have ever looked at a URL like /users/550e8400-e29b-41d4-a716-446655440000 or an API response with an id field that looks like a string of hexadecimal gibberish, you have seen a UUID. They are everywhere in modern software — database primary k...

CSS gives you five ways to write the same color. That might seem redundant, but each format has a specific use case, and knowing when to reach for which one can simplify your stylesheet significantly. The Formats Hex #RRGGBB The most common format...

If you have ever seen a number like 1715251200 in an API response and wondered what it means — that is a Unix timestamp. It is one of the most universal ways to represent a moment in time in software, and every developer will encounter it eventually....

If you've ever read a hex colour in CSS, debugged a bitwise operation, or stared at a Linux file permission like chmod 755, you've worked with number bases — whether you realised it or not. This guide covers the four bases every developer encounters...

If you've ever built an API that authenticates users, you've probably encountered a JWT. You know it starts with eyJ, it has two dots in it, and when something goes wrong, your auth middleware throws an error that tells you nothing useful. Here's wh...

Password security is one of those topics where almost every developer knows the basics — and still gets it subtly wrong under deadline pressure. This post covers the most common mistakes, what to do instead, and how to think about password strength i...