Independent reviews. IonBin has no partnerships with the tools on this page and was not paid for these listings. Our evaluations are our own, based on public documentation and our research. Product names are trademarks of their owners and are used for identification only. How disclosure works.

Color & backgrounds / Palette generator and color exploration tools

Coolors

A fast way to explore a color direction, provided the chosen palette gets a second pass as an actual interface.

Documentation reviewed

Source review

What this status means

Understand the resource

What it is.

Coolors is a browser-based collection of palette generation and color exploration tools. Its generator makes it easy to compare sets of colors quickly, while the wider product offers palette browsing and other color workflows. A good palette is raw material: the team still needs to assign colors to text, surfaces, actions and states.

When it is useful

Use it at the beginning of a visual direction or when a fixed brand color needs supporting neutrals and accents. It is most useful for generating candidates that can then be evaluated in realistic UI content.

A proposed application

Put it to work.

This example illustrates a possible use. The proposed workflow and expected result are separate from the bounded checks recorded below.

Try this

Generate a five-color candidate for a workshop registration page, then assign a neutral background, text color and primary action color. Test those actual pairs in a contrast checker and compare the page with success, error and disabled states before approving the palette.

Result to aim for

A short palette with named interface roles and a list of approved contrast pairs, rather than five attractive swatches with no usage rules.

Before you start

What you need.

  • A modern browser for the public generator.
  • A separate contrast and interface review after choosing colors.
  • Permission to use any images or other materials you later introduce; this review used no uploads.

The practical boundaries

What to watch for.

  • Rapid palette changes can be visually intense. The generator’s welcome screen includes a warning about flashing colors; avoid repeated rapid generation if that is unsuitable for you.
  • The public generator loads advertising, analytics and other third-party resources. Account-free use does not mean the page makes no external requests.
  • A generated palette does not establish accessible text or reliable status communication. Check each assigned pair and avoid using color as the only status cue.
  • Saving, account features, paid access and image-based workflows were outside this review. Confirm the current feature boundaries before building a workflow around them.

Review record

What we could establish.

  • Why included — 2026-10-19: the publisher’s current homepage claims use by more than eight million creative users and offers more than ten million palettes to explore. These are publisher-reported scale claims, not independently audited users or verified trend growth.
  • The public generator produced a new five-color palette using Space under a GET/HEAD-only guard. Initial text-fetch access failed, but a fresh anonymous browser reached the homepage and generator successfully.
Source coverage and runtime coverage are separate

The source-review notes describe documentation and identity. The account-free evaluation below records exactly which public interaction or local fixture was checked, what happened, and what remains untested.

Check current access, terms, licensing and data handling before using a resource with your own material.

Runtime and security evaluation

What the evaluation covers.

Bounded runtime checkedAccount-free ·

The public generator produced a different five-color palette when Space was pressed. Hosted advertising and analytics requests were present, and non-GET requests were blocked throughout.

Methods: Public HTTP response · Public browser sample · Source review. A completed check covers the stated sample; it is not a safety certification.

Target
https://coolors.co/generate
Version or capture
Unversioned public hosted page sampled on 2026-10-19; no installed package version attested.
Integrity scope
Recorded document SHA-256 6c596bcd87ddb8c94e10143eacbbc2716cefe320815560c2927bdeb34f5d2ed7. This is the HTML response only, not an integrity guarantee for scripts, dependencies or the whole service.

Test conditions

  • Fresh anonymous Chromium 155.0.8059.82 context on Windows; 1365 × 900 viewport; reduced motion requested.
  • GET and HEAD only; non-GET methods and WebSockets blocked. No owner browser session, account, credentials, private fixtures, uploads or purchases.
  • Only the named public controls and synthetic values were used. Screenshots and compact request observations were retained as review evidence.

Individual checks and observations

  1. Public document response

    pass

    Public HTTP response: Navigate to the recorded public target in a fresh anonymous browser.

    Observed: The sampled document returned HTTP 200 over HTTPS. Its response body SHA-256 was 6c596bcd87ddb8c94e10143eacbbc2716cefe320815560c2927bdeb34f5d2ed7; this fingerprints only the recorded HTML response.

  2. Generate a palette

    pass

    Public browser sample: Dismiss the welcome and tutorial overlays, focus the page and press Space once.

    Observed: The five-color URL changed from 393d3f-d5bbb1-9cc4b2-c98ca7-e76d83 to c4bbb8-f5b0cb-dc6acf-745c97-39375b. All five resulting codes appeared in the page, and the tutorial was no longer visible.

  3. Primary-source scope review

    pass

    Source review: Read the official pages and relevant repository or standard references linked below.

    Observed: The fresh browser reached the product homepage and recorded its publisher-reported scale claim. A text-fetch attempt failed earlier; that access difference does not contradict the successful browser sample.

  4. Broader workflow and assurance coverage

    not-run

    Public browser sample: Keep authenticated, installation, private-data and broader accessibility workflows outside this bounded pass.

    Observed: Palette locking, image extraction, AI functions, saved projects, account permissions, payments and downloaded exports were not tested.

Security findings and boundaries

Passive observation of the sampled public pages, response headers and request destinations, plus the specific documented boundaries below. No intrusive scanning or security certification.

Observed · caution

Third-party hosted surface

The final generator sample requested 16 origins including advertising, analytics, authentication assets and CDNs. Seven POST requests, including analytics and challenge traffic, were blocked. Account-free operation is not evidence of zero tracking.

Observed · caution

Rapid color changes carry a warning

The welcome screen displayed a warning about flashing colors and photosensitive seizures. This sample generated one palette; no rapid flashing or photosensitivity assessment was performed.

Practical advice · caution

Uploads and accounts have separate risks

This review used no images, credentials or saved palettes. Inspect the relevant privacy and retention terms before using image extraction or account storage with business materials.

Practical caveats

  • Generate slowly enough to compare deliberate candidates; the tool’s own warning makes rapid repeated changes unsuitable for some people.
  • Assign semantic roles and run pair-specific contrast checks before using the palette in a product.

What remains untested

  • Palette locking, image extraction, AI functions, saved projects, account permissions, payments and downloaded exports were not tested.
  • One browser, one viewport and a short observation window; no cross-browser, assistive-technology or complete accessibility audit.
  • Proposed use-case examples in this review were not implemented as a production workflow.
  • The publisher-linked privacy policy was not retrievable through the text-fetch path; no retention or privacy-policy assurance is made.

Security limits

  • No backend, authenticated authorization, session isolation, vulnerability exploitation, dependency scan or account-data retention assessment was performed.
  • The GET/HEAD-only guard can change hosted behavior; blocked background traffic is reported rather than treated as a product defect. Request observations are a bounded sample, not proof of all data handling.

Evaluation sources

  1. Product and publisher-reported scale
  2. Public palette generator
  3. Privacy policy

    Publisher-linked policy destination; text retrieval returned 403 in this pass, so policy contents were not reviewed.

Download this evaluation record (JSON)

Follow the evidence

Sources and further reading.

  1. Product and publisher-reported scale
  2. Public palette generator
  3. Privacy policy

    Publisher-linked policy destination; text retrieval returned 403 in this pass, so policy contents were not reviewed.

Keep exploring

More in color & backgrounds.

View category

Documentation reviewed

Realtime Colors

See a palette in page context, then export its color roles for a more useful design handoff.