Handitab

API Key / Token Generator

Generate random strings for API keys, tokens, and secrets, 1 to 512 characters long, in alphanumeric, hex, or URL-safe Base64 characters.

About API Key / Token Generator

An API key or token is a long random string used to identify or authorize a client. This generator picks each character independently from the chosen alphabet using the browser's cryptographic random source (crypto.getRandomValues) with rejection sampling, so every character is equally likely. A 32-character alphanumeric string carries about 190 bits of entropy. The Base64 URL-safe option draws from that 64-character alphabet directly and does not encode bytes.

Also known as: Random String Generator.

How to use API Key / Token Generator

  1. Fill in "Length", "Characters", "Prefix" and "Count".
  2. The result appears below. Press "Generate again" for a new one.
  3. Copy the result with the copy button, or download it as a file where that is offered.

Questions about API Key / Token Generator

How long should an API key be?

Aim for at least 128 bits of randomness. That is 32 hexadecimal characters or 22 alphanumeric ones. The default of 32 alphanumeric characters gives about 190 bits, which is more than enough against guessing.

Runs in your browser. Page last updated .

More security tools

All 10 security tools
Cipher ToolsEncode or decode text with the classical Caesar, ROT13, Atbash, and Vigenère ciphers, for learning and puzzles rather than for security.Hash GeneratorCalculate the MD5, SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512 hashes of any text at once, as one-way digests that cannot be reversed.JWT DecoderDecode a JSON Web Token to read its header, payload, and expiry time, or create an HS256-signed token from a JSON payload and secret.JWT EncoderCreate a signed JSON Web Token from a JSON payload and a secret, using the HS256 algorithm (HMAC with SHA-256) in your browser.Password GeneratorGenerate strong random passwords of 6 to 64 characters in your browser, with a choice of letters, digits, and symbols and an entropy estimate.Password Strength CheckerCheck how strong a password is from its length and character variety, with an entropy estimate in bits and suggestions to improve it.