Random Secret Generator
Generate high-entropy random secrets designed for machine-to-machine authentication (e.g., API keys, database credentials, session secrets, token signing keys).
208 Bits of Cryptographic Entropy
Maximum Strength (Brute-force Infeasible) • Pool size: 91 characters
Generator Settings
Maximum entropy for production servers, tokens, and cryptographic keys.
Secrets are generated exclusively on your client device using the browser's cryptographically secure pseudo-random number generator (window.crypto.getRandomValues). No data is transmitted across the network.
Hardware-Backed Randomness
Direct access to OS-level entropy pools via Web Crypto API (CSPRNG) ensures zero predictability or collision risks.
Multi-Format Flexibility
Switch effortlessly between alphanumeric strings for env configs, hex for hash salts, and Base64URL for Auth.js and NextAuth.
Batch Export & .env File
Copy single keys, copy entire batches at once, or export ready-to-use .env file snippets in a single click.
Frequently Asked Questions
What makes these secrets suitable for production API keys and session secrets?
Which encodings are supported for generated secrets?
Are generated secrets logged anywhere?
More Security & Privacy Utilities
DMARC, SPF & DKIM Email Security Auditor & Generator
Audit live DMARC, SPF, DKIM, and BIMI DNS records. Detect 10-lookup SPF limit violations, spoofing vulnerabilities, and generate copy-paste DNS records and 2048-bit DKIM keys.
TOTP / 2FA Authenticator Simulator
Simulate, generate, and verify RFC 6238 Time-based One-Time Passwords with interactive countdowns, URI import, SHA-1/256/512 algorithms, and clock drift testing.
PII & Secret Log Redactor / Masker
Scrub credentials, API keys, passwords, credit cards, emails, and PII from production logs and error stack traces 100% locally in your browser before sharing.