Free API Key & Secret Token Generator
Generate random API keys and secrets · hex, base64url, or alphanumeric, with an optional prefix · straight from your browser's CSPRNG.
Frequently asked
How should I store the keys I generate?
Server-side only: an environment variable, a secrets manager, or your platform's encrypted config. Never commit them to git or ship them in frontend code · that's the #1 finding in vibe-coded apps.
Why add a prefix like sk_ or app_?
Prefixes make leaked keys identifiable in code scans and logs. It's why Stripe uses sk_live_ and GitHub uses ghp_ · secret scanners (including SimplyScan) can recognize and flag them instantly.
Related tools
- TOTP Generator · Turn a Base32 secret or otpauth:// URI into live two-factor codes · the same math your authenticator app runs, right in your browser.
- JWT Generator · Build a signed HS256 JSON Web Token for testing · edit the payload, set a secret, and copy the token. Everything runs locally via Web Crypto.
- HMAC Generator · Compute an HMAC signature from a message and secret key · SHA-256/384/512, hex or Base64 output, all in your browser via Web Crypto.