Random string generator
Generate random strings for IDs, hash keys, API tokens, or passwords. Runs entirely in your browser - nothing is sent anywhere.
n9Aw8MWwxZ6DJdYDL4eAqwT2IbRW81xZRandom strings show up everywhere in software: API keys, session tokens, database IDs, temporary passwords, CSRF tokens, and one-off test fixtures. Reusing predictable values (or the same string twice) for any of these is a security risk, so this generator uses your browser's cryptographic random number source to produce strings that are actually unpredictable - not a weak pseudo-random sequence.
Everything happens locally in your browser. Nothing you generate here is sent to a server, logged, or stored, which makes it safe to use for things like real API keys or passwords.
Frequently asked questions
Is this safe to use for real passwords and API keys?
Yes. Generation happens entirely in your browser using the Web Crypto API - nothing is transmitted or stored, so the values you generate never leave your device.
How long should a random string be?
For API keys and tokens, 32+ characters mixing letters, numbers, and symbols is a common baseline. For memorable passwords, length matters more than complexity - longer is generally stronger.
Why did my string change when I clicked Generate again?
Each click produces a brand new random string with the current settings, replacing the previous one - so you always get a fresh value rather than a repeat.