What format should I use for API keys?

Hex and Base64url are common for API keys. Hex is case-insensitive and URL-safe. Base64url is more compact (fewer characters for the same entropy). Alphanumeric is easiest to read and communicate verbally.

How much entropy do I need?

For API keys used in production, 128 bits (32 hex chars) is the minimum; 256 bits (64 hex chars) is standard. For session tokens, 128 bits is generally sufficient.

Token & API Key Generator

Generates cryptographically secure random tokens and API keys using the browser's crypto.getRandomValues() API. Choose from hex (128-bit to 512-bit), Base64url, alphanumeric, and custom character set formats. Generate multiple tokens at once for bulk key provisioning.

Format

Length: 32 chars (~128 bits)

Prefix (optional)

Count

Choose your token format and length, then generate secure random keys for your applications.

Frequently Asked Questions

Related Tools

Lorem Ipsum Generator

Generate placeholder lorem ipsum text by word, sentence, or paragraph.

Password Generator

Generate strong, random passwords with configurable rules.

Slug Generator

Convert any title or phrase into a clean URL slug.

New

QR Code Generator

Generate QR codes for URLs, text, WiFi credentials, and more.

New

Fake Data Generator

Generate realistic fake names, emails, addresses, phone numbers, and more.

New

Random Color Generator

Generate random colours in hex, RGB, and HSL formats.