What prefix should I use for API keys?

Common: sk_ (secret), pk_ (public) plus live_/test_ for environment.

How long should API keys be?

At least 32 bytes (~256 bits) for production.

Yes, store only a hash (e.g., SHA-256) when possible.

Generate secure API keys with custom prefixes, formats, and lengths for your applications.

API keysecret keyauthenticationtoken

Click generate to create an API key

0 characters

Prefix

Key Length (excluding prefix)32

Character Set

Add dashes for readability

Security Tip: Store API keys securely using environment variables or a secrets manager. Never commit keys to version control.

A secret token used to authenticate requests to an API.

Store hashed keys in DB when possible.

Quick answers about usage, privacy, and best practices.

Privacy: Everything runs locally in your browser. No data is sent to a server.

Create secure random tokens in hex, base64, or alphanumeric format for sessions, CSRF, and more.

Generate RFC 4122 compliant UUIDs (v4) using cryptographically secure randomness.

Generate cryptographically secure random passwords with customizable length and character sets.

Privacy First: This tool runs entirely in your browser. No data is sent to any server.