Developer keys and secrets
API keys, JWT secrets, UUIDs, framework secret keys and the other values you need when building and deploying software.
- API Key GeneratorGenerate random API keys with an optional prefix like sk_live_, in Base62, hex or Base64url. 32 characters give about 190 bits of entropy.
- JWT Secret GeneratorStrong HMAC secrets for signing JSON Web Tokens with HS256, HS384 or HS512, sized to match each algorithm. Base64url, Base64 or hex output.
- UUID GeneratorGenerate random UUID v4 values in bulk, with or without hyphens, in upper or lower case. Standard RFC 9562 format, created locally.
- UUID v7 GeneratorTime-ordered UUID v7 values that sort by creation time, ideal for database primary keys. RFC 9562 format with 74 random bits per ID.
- ULID GeneratorGenerate ULIDs: 26-character, time-sortable IDs in Crockford Base32 with 80 random bits. A compact alternative to UUIDs for logs and databases.
- Nano ID GeneratorGenerate Nano IDs: short, URL-safe random IDs like V1StGXR8_Z5jdHi6B-myT. Set the length and alphabet and see the collision strength.
- Random String GeneratorRandom strings of any length from letters, numbers, hex, Base58 or your own character set. For tokens, test data, codes and identifiers.
- TOTP Secret GeneratorCreate TOTP secrets for two-factor authentication with a scannable QR code, an otpauth URI and a live 6-digit code to test your setup.
- Django Secret Key GeneratorGenerate a Django SECRET_KEY with the same 50-character alphabet Django uses. Output a raw key, a settings.py line or a .env entry.
- Laravel APP_KEY GeneratorGenerate a Laravel APP_KEY in the base64: format Laravel expects, for AES-256-CBC or AES-128-CBC. Paste it straight into your .env file.
- WordPress Salt GeneratorGenerate all eight WordPress security keys and salts for wp-config.php, or as .env lines for Bedrock and Docker setups. Created in your browser.
- Rails secret_key_base GeneratorGenerate a Rails secret_key_base: 64 random bytes as 128 hex characters, the same format as bin/rails secret. Ready for credentials or ENV.
- Auth.js (NextAuth) Secret GeneratorGenerate AUTH_SECRET for Auth.js or NEXTAUTH_SECRET for NextAuth.js: 32 random bytes in Base64, the same as npx auth secret.
- Flask Secret Key GeneratorGenerate a Flask SECRET_KEY: 32 random bytes as hex, the same as Python's secrets.token_hex(). Signs sessions, cookies and CSRF tokens.
- MongoDB ObjectId GeneratorGenerate MongoDB ObjectIds: 24-character hex IDs with an embedded timestamp, a random value and a counter. Handy for fixtures and tests.
- Webhook Secret GeneratorGenerate webhook signing secrets with a whsec_ style prefix and test HMAC-SHA256 signatures right on the page. Created locally in your browser.
- OAuth Client ID and Secret GeneratorGenerate an OAuth client ID and client secret pair for your own authorization server or app integrations. Choose the ID format and secret length.
- Random Token GeneratorGenerate URL-safe random tokens for password resets, email verification, sessions and CSRF protection. 256 bits by default, in Base64url.
- Session Secret GeneratorGenerate session and cookie signing secrets for Express, Koa, Fastify and similar frameworks. 48 letters and numbers, safe in any config file.
More categories
- Password generatorsRandom passwords, passphrases, PINs and WiFi passwords for accounts and devices, with honest strength numbers.
- Encryption keys and hashesSymmetric keys, key pairs, salts and hash tools built on the Web Crypto API.
- SSH, WireGuard and recovery keysInfrastructure keys, recovery and license codes, and handy utilities like random numbers and MAC addresses.