How to use: Zero-Width Character Remover
Zero-Width Character Remover is a free online Text Tools tool that detect and strip invisible characters and bidi controls used in Trojan Source attacks instantly in your browser. Paste your data, adjust the options and get the result in real time — no installation, no sign-up, and nothing is ever uploaded to a server.
Use Zero-Width Character Remover now →
Description
Detect and strip invisible characters and bidi controls used in Trojan Source attacks.
- Text Tools
- Because everything is computed client-side, Zero-Width Character Remover is safe to use with sensitive data such as API keys, tokens or private logs.
How to use
Using Zero-Width Character Remover takes three steps:
- Paste your data into the input box (or load the example).
- Configure the options to match your target format or scenario.
- Copy, download or inspect the output — it updates live as you type.
Run
Examples
Contains a zero-width space inside an identifier and a RIGHT-TO-LEFT OVERRIDE — the Trojan Source pattern.
Input
access_granted } // return false
Output
access_granted } // return false
This output was produced by actually running the tool, not written by hand.
Use cases
Common situations where Zero-Width Character Remover helps:
- Detect and strip invisible characters and bidi controls used in Trojan Source attacks.
Parameters
| key | Options | type | allowed | default | Zero-Width Character Remover |
|---|---|---|---|---|---|
mode | Mode | select | detect (Detect and report), strip (Remove them), show (Replace with visible markers) | — | strip |
Input: text · Output: text · live update while typing: ✓
FAQ
What is Zero-Width Character Remover?
Zero-Width Character Remover detect and strip invisible characters and bidi controls used in Trojan Source attacks. It runs entirely in your browser, so your data stays private.
Is Zero-Width Character Remover free to use?
Yes. Zero-Width Character Remover is free, unlimited and works without registration or installation.
Does my data get uploaded?
No. All processing happens locally in your browser; nothing is sent to any server.
Good to know
- Everything runs client-side, so extremely large inputs are limited by your browser tab’s memory rather than by a server upload limit.