Random Token Generator
Generate cryptographically random tokens, API keys and passwords locally in your browser using the platform CSPRNG. Free and private, no data sent anywhere.
Generate cryptographically secure random tokens for API keys, session IDs, password resets, or CSRF secrets, right in your browser using the Web Crypto API instead of a predictable pseudo-random function.
How to use it
- Set the length and pick which character sets to include (uppercase, lowercase, numbers, symbols)
- Click generate to get a new token instantly
- Copy it to your clipboard and use it as your key, secret, or ID
Frequently asked questions
- Are these tokens actually secure enough for passwords or API keys?
- Yes, as long as your browser supports the Web Crypto API (all modern browsers do), the tool uses crypto.getRandomValues() under the hood, which is a cryptographically secure random number generator, not Math.random().
- Does the token get sent anywhere or logged?
- No. Generation happens entirely in your browser tab, so nothing is transmitted or stored server-side. Closing the tab is enough to make sure it's gone.
- What length or character set should I use for an API key vs a session ID?
- For API keys and secrets, 32+ characters from the full alphanumeric+symbol set is common; for URL-safe tokens (session IDs, reset links) stick to letters and numbers only and 16-24 characters is usually plenty.
- 1
Nothing is uploaded
The file never leaves your device. There is no server to send it to, so there is nothing to leak, log, or subpoena.
- 2
No signup, no limits
No account, no email, no daily cap, no watermark, and no paid tier waiting behind the third file.
- 3
Works offline
Load the page once and it keeps working with the network off, because all the work was always happening locally.