Are these tokens cryptographically secure?

Yes, generation uses the browser's native window.crypto.getRandomValues API, providing cryptographically strong pseudorandom numbers.

Are UUIDs secure as secrets?

UUID v4 values are random but contain only 122 random bits and a fixed format. For secrets, a longer hex or Base64 key is better.

Are generated keys stored anywhere?

No. They exist only in this browser tab until you copy them.

How long should an API key be?

At least 32 random bytes, which is 64 hex characters or about 43 Base64 characters.

Can I generate keys in bulk?

Yes. Set the quantity to create several keys at once.

API Key & Secret Token Generator

Generate cryptographically secure API secrets, auth tokens, session keys, and UUIDs. Supports Hex, Base64, UUID v4, and custom prefix formatting.

Generated API KeyWeb Crypto CSPRNG

Key Parameters

Secret Format

Key Prefix

Quantity

How to use API Key & Secret Token Generator

Select token format: Hex, Base64, UUID v4, or Alphanumeric.
Specify key length and optional prefix (e.g. 'sk_live_', 'pk_test_').
Set batch quantity if generating multiple keys.
Click Generate and copy tokens.

About API Key & Secret Token Generator

Generate secure random API keys, tokens, and secrets. Choose hex, Base64, alphanumeric, or UUID v4, set the length from 8 to 128 characters, add a prefix such as sk_live_, and create several keys at once.

Choosing a format

Hex keys use 0 to 9 and a to f and are easy to store and compare. Base64 packs more randomness into fewer characters. Alphanumeric avoids symbols that can cause trouble in URLs and config files. UUID v4 is the standard 36-character identifier used by many databases.

A prefix such as sk_live_ or pk_test_ makes keys easy to recognize, and lets secret-scanning tools spot a leaked key in code.

Security

Keys are generated with your browser's cryptographic random generator and never leave your device. For production secrets, at least 32 bytes of randomness (64 hex characters) is a common minimum.

Store secrets in environment variables or a secrets manager, never in code that is committed to a repository.

Common uses

API authentication: Create keys for clients of your API.
App secrets: Generate session secrets and signing keys.
Test data: Make realistic tokens and UUIDs for tests.
Webhook secrets: Create shared secrets for webhook signatures.

Questions about API Key & Secret Token Generator

Are these tokens cryptographically secure?: Yes, generation uses the browser's native window.crypto.getRandomValues API, providing cryptographically strong pseudorandom numbers.
Are UUIDs secure as secrets?: UUID v4 values are random but contain only 122 random bits and a fixed format. For secrets, a longer hex or Base64 key is better.
Are generated keys stored anywhere?: No. They exist only in this browser tab until you copy them.
How long should an API key be?: At least 32 random bytes, which is 64 hex characters or about 43 Base64 characters.
Can I generate keys in bulk?: Yes. Set the quantity to create several keys at once.

More tools like API Key & Secret Token Generator

Comments

Questions, ideas, or a bug in API Key & Secret Token Generator? Let us know.