Token & API Key Generator
Cryptographically secure tokens using the Web Crypto API. UUID, hex, Base64, or custom API keys.
Why not Math.random()?
Math.random() is a pseudorandom number generator — its output is predictable and unsuitable for security tokens. This tool uses crypto.getRandomValues(), the same API that powers TLS and SSH key generation.
Token types explained
UUID v4 is the standard for database IDs and correlation tokens. Hex strings work well for session tokens and nonces. Base64 is compact for API tokens. API keys with prefixes (like sk_ or vlt_) make it easy to identify and rotate leaked credentials.
Need to share a token securely?
Don't paste tokens in Slack or email. Send them via an encrypted, self-destructing link that only the recipient can open.