Token Generator - MacigHub

Secure random token generator. Create cryptographically strong API tokens, passwords, and random strings in multiple lengths and formats.

Popular tools: Base64 · JSON Diff · UUID · QR Code · Regex · Password

About this tool

What does it do?

It creates cryptographically strong random strings for API keys, session tokens, password-reset links and other secrets — using the operating system’s secure randomness (Web Crypto), not predictable Math.random().

How to use it

Choose length and character set (URL-safe avoids quoting bugs).
Generate and copy straight into your secret store.
One token per purpose — never reuse across services.

Examples

A 32-byte API key for a new integration.
Single-use password-reset tokens with expiry enforced server-side.
Webhook signing secrets per customer.

Important limitations

A token is only as safe as its storage: leaked tokens must be revorable server-side.
Randomness quality matters — this tool uses Web Crypto; DIY random is not equivalent.
Tokens are not passwords for humans: pair with rotation and expiry policies.

Privacy

Generated on-device with Web Crypto. Generated values are never transmitted or logged anywhere.

Frequently asked questions

How long should an API key be?

At least 128 bits of entropy (32 hex chars / ~22 base64 chars); 256 bits for high-value keys.

UUID or random token?

Random tokens for secrets (unpredictability is the point); UUIDs for identifiers.

Can I put it in a URL?

Use the URL-safe alphabet; even then prefer headers over query strings since URLs get logged.