Click Generate below
Length
20💡 Passwords are generated using crypto.getRandomValues()— cryptographically secure, never sent anywhere. We don't save passwords here on purpose: store them in a password manager, not a browser tool's history.
Random bytes rendered as hex, base64, base64url, a UUID or a passphrase — with the actual entropy stated.
Byte-oriented secrets for signing keys, session ids and webhook secrets. Every value comes from the browser's cryptographic random source, and the entropy shown is the real byte count — not a strength score.
Preset
256 bits. HMAC and JWT signing secrets.
Never leaves your browser. Generated values stay in this tab. They are never stored, never transmitted, and never written into a share URL.