- What zero-width characters does it find?
- ZWSP (U+200B), ZWNJ (U+200C), ZWJ (U+200D), BOM (U+FEFF), soft hyphen (U+00AD), and several others. All invisible when displayed normally.
- Why are they dangerous?
- They pass validation, get copy-pasted, then break regex matching, authentication, and parsing downstream. A username with a zero-width space isn't the same as the visible username.
- Where do they come from?
- Word processors, some websites, Slack formatting, and intentional steganography. Sometimes malicious (zero-width tracking in docs).
- Can I remove them?
- Yes — click 'strip' to get a clean version. For programmatic removal, use Clipboard Cleaner which handles a broader range of invisible chars.