How many bits of entropy do I need?

128 bits minimum for security tokens; 256 bits for API keys.

Base64 is more compact; hex is simpler and common in databases.

Is this suitable for production use?

Yes, as it uses cryptographically secure randomness.

Create secure random tokens in hex, base64, or alphanumeric format for sessions, CSRF, and more.

tokenrandomhexbase64sessionCSRF

Click generate to create a token

256 bits0 characters~64 est.

Format

Entropy32 bytes (256 bits)

64 bits128 bits256 bits512 bits

Quick Presets

Secure: Tokens are generated using crypto.getRandomValues(). Suitable for session IDs, CSRF tokens, and API secrets.

A cryptographically secure string used for sessions, CSRF, reset links, etc.

Hex, Base64, URL-safe Base64, and alphanumeric.

Generated with cryptographically secure randomness in the browser.

Quick answers about usage, privacy, and best practices.

Privacy: Everything runs locally in your browser. No data is sent to a server.

Generate secure API keys with custom prefixes, formats, and lengths for your applications.

Generate cryptographically secure random passwords with customizable length and character sets.

Generate RFC 4122 compliant UUIDs (v4) using cryptographically secure randomness.

Privacy First: This tool runs entirely in your browser. No data is sent to any server.