Security

Random Token Generator

Generate tokens, API keys, nonces or IDs locally in the browser. Values are created with the Web Crypto API and are not sent to a server.

Token settings

Output format

Length

For hex/Base64 this is the number of random bytes. For character sets this is the character length.

Number of tokens

Optional prefix

Grouping

Purpose

Character set for alphanumeric or custom tokens Lowercase letters Uppercase letters Digits Symbols remove ambiguous characters use each character only once

Custom extra characters

Token output

Details

Documentation example

Usage notes

Tokens are generated locally in the browser. API keys, reset tokens and session IDs should still be stored securely on the server, expire after a defined time and only be transmitted via HTTPS.

Shorter formats are often enough for public IDs. Secrets benefit more from longer values with high entropy than from short, readable strings.