Token Generator
Generate cryptographically secure random tokens for API keys, secrets and session ids. Choose hex, Base64URL, alphanumeric or numeric, set the length, and copy the batch — all with your browser’s secure random generator, nothing sent anywhere.
- 🔒 100% private — no uploads
- 🆓 Free, no watermark
- 📱 Works on any device
How to generate a token
- 1
Pick alphabet & length
Choose hex, Base64URL, alphanumeric or numeric, then set the length — and how many to generate at once.
- 2
Generate securely
Tokens come from your browser’s crypto.getRandomValues with unbiased sampling — not Math.random — so they’re genuinely unpredictable. Nothing is sent anywhere.
- 3
Copy and use them
Copy the batch with one click and paste it into your config or secrets manager. Regenerate for fresh ones anytime.
Why use Token Generator?
For API keys & secrets
Hex and Base64URL suit API keys, secrets and session ids; numeric is handy for OTP-style codes.
Cryptographically secure
Uses crypto.getRandomValues with rejection sampling to avoid modulo bias — far stronger than Math.random.
100% private
Everything runs locally in your browser with JavaScript. Your input is never uploaded, stored or seen by anyone — it even works offline once the page has loaded.
Works on any device
No install and no account. Runs in any modern browser on Windows, macOS, Linux, Android or iPhone.
Why generate tokens in the browser?
A secret is only safe if no one else ever sees it. Tools that generate tokens on a server ask you to trust that the server never logs them. This generator runs entirely in your browser with the Web Crypto API, so each token exists only on your device until you copy it.
Frequently asked questions
Are these tokens cryptographically secure?
Yes. Every token comes from crypto.getRandomValues, your browser’s secure random source, with rejection sampling to avoid modulo bias — much stronger than Math.random.
Which alphabet should I choose?
Hex and Base64URL are ideal for API keys, secrets and session ids (Base64URL is URL-safe). Alphanumeric gives readable identifiers, and numeric suits OTP-style codes.
Is my data uploaded to a server?
No. The tool runs entirely in your browser, so whatever you paste stays on your device. It’s safe for tokens, secrets and confidential data, and works offline once loaded.