Generate cryptographically secure random strings, API keys, and tokens with custom character sets, prefixes, and group separators. Processed in your browser.
62 characters
Generate random strings for API keys, tokens, session secrets, and identifiers with full control over character sets and formatting. All randomness comes from the Web Crypto API. Nothing is sent to a server.
Generate test API keys with realistic prefixes. OpenAI uses sk- followed by 51 alphanumeric characters. GitHub PATs start with ghp_. Stripe live keys start with sk_live_. The presets handle these automatically.
Use the Base64 URL-safe charset for tokens that need to work in URLs and HTTP headers without encoding issues. The charset avoids characters that cause problems in different contexts.
Hex strings are useful for database IDs, color codes, and cryptographic nonces. Use hex-lower for case-insensitive contexts or hex-upper for density (no lowercase extends character recognition).
Custom charsets let you exclude easily confused characters. For example, if you want only consonants (no vowels to avoid accidental words), type them directly into the custom field.
The number of possible strings grows exponentially with both length and character set size. A 32-character alphanumeric string (62 characters) has roughly 190 bits of entropy, equivalent to a 192-bit key. A 32-character hex string (16 characters) has 128 bits, still well above current brute force thresholds.
Nothing you paste leaves this tab. Every tool runs entirely in your browser — no upload, no server, no account.