Why this token generator?
- Secure mode uses CSPRNG (
crypto.getRandomValues) by default. - Generate base64url, hex, or custom-charset tokens from one page.
- See approximate entropy and collision risk for your settings.
- Share settings safely: share URLs never include generated tokens.
How to use (3 steps)
- Choose a format (base64url / hex / custom charset).
- Set length and count, then generate.
- Copy, download, or share settings-only URL.
Generate
Token generator
Pick a format and length, generate a batch, then copy, download, or share settings (never tokens).
Results
Frequently asked questions
Is this secure?
Secure mode uses crypto.getRandomValues. Seeded mode is for reproducible tests only and is not secure.
How many bytes should I use for an API key?
A common baseline is 32 bytes (256 bits). For higher security margins, you can use 48 or 64 bytes.
What is base64url?
Base64url is base64 modified for URLs: + becomes -, / becomes _, and padding (=) can be removed.
Are generated tokens stored or uploaded?
No. Everything runs locally in your browser. Tokens are not uploaded and are not saved by default.
Why doesn’t the share URL include tokens?
Putting secrets in URLs can leak through history, logs, and referrers. This tool shares settings only, never tokens.