Loadingβ¦
Loadingβ¦
Generate random strings, API keys, and secret keys: pick the length and characters (hex, Base64url, alphanumeric, custom) or a key size in bytes. Cryptographically secure.
Also covers: Random string generator Β· Secret key generator Β· API key generator Β· Secure random generator
Generatingβ¦
Random strings for IDs, tokens, and API keys, with any character set and an optional prefix like sk_live_. Secret keys as raw bytes for HMAC signing, JWTs, AES, and app secrets.
Make one or hundreds. Each value comes from your browser's cryptographic random generator.
32 random bytes (256 bits) is the standard for HMAC-SHA256, JWT HS256 secrets, and AES-256 keys. 16 bytes (128 bits) is the minimum for anything security-related.
Both encode the same random bytes. Hex uses 2 characters per byte (64 for a 32-byte key); Base64 uses about 1.33. Base64url swaps + and / for - and _ so the value is safe in URLs and file names.
They're generated with the same secure randomness as server-side libraries. Treat them like any secret: store them in environment variables or a secrets manager, never in source code.
No. Everything is generated and processed in your browser with its built-in cryptography. Nothing you type or generate is uploaded, logged, or stored.
Passwords
Generate strong random passwords in your browser: choose length and character types, skip look-alike characters, and make up to 500 at once.
Passwords
Generate strong, memorable passphrases from the EFF's 7,776-word list, picked with secure randomness. Choose word count, separators, and capitals.
Passwords
Generate random 4, 6, or 8-digit PINs that skip easy guesses like 1234, 1111, years, and dates. Secure randomness, generated in your browser.
Passwords
Check how strong a password really is: estimated crack times, the words and patterns that make it guessable, and tips to improve it. Never leaves your browser.
2FA
Get live 2FA codes from a TOTP secret or otpauth:// link, check a code, or create a new secret with a QR code for authenticator apps. RFC 6238.
Hash
Generate MD5, SHA-1, SHA-256, SHA-512, SHA-3, BLAKE, and CRC32 hashes of text as you type, create HMAC signatures, and check a hash for a match.