UtilitiesRuns locallyNo account
Timestamp converter (Unix, ISO, FILETIME, HFS+)
Convert between Unix seconds and milliseconds, ISO 8601, local time, and the non-standard epochs used by Windows, macOS, and Flask.
Open in ctfpalForensics challenges live on timelines, and the timestamps come from systems that disagree about when time started. Recognising which epoch a number uses is usually a matter of its magnitude.
The practical test is to try each interpretation and see which one produces a plausible date. A number that reads as 2019 under one epoch and as the year 51,000 under another has answered the question for you, and that is faster than reasoning about which system wrote the value.
| Epoch | Starts | Unit | Recognise by |
|---|---|---|---|
| Unix | 1970-01-01 | seconds | 10 digits today |
| Unix (ms) | 1970-01-01 | milliseconds | 13 digits |
| Windows FILETIME | 1601-01-01 | 100 ns | 18 digits |
| HFS+ / Mac | 1904-01-01 | seconds | ~2 billion higher than Unix |
| itsdangerous | 2011-01-01 | seconds | Small - used in Flask cookies |