Security

Random String and Token Generator

Generates random strings in the alphabet you choose — hex, Base58, digits or alphanumeric — with an optional prefix.

Loading the tool…

Processing happens locally in your browser. What you paste or load is processed by this page and is not uploaded to a server. Nothing is stored unless you use a control that says it stores something, and you can clear anything this site has kept from the privacy page.

How to use this tool

  1. Set the length and how many you need.
  2. Choose the alphabet — Base58 if a person will ever read the string aloud or retype it.
  3. Add a short prefix if these are tokens, so a leaked one is recognisable in a log or findable by a secret scanner.
  4. Select Generate.

What random string generator does

This is for the identifiers that are not UUIDs: an API key, a webhook secret, a share token, a batch of realistic-looking references for a test fixture. The alphabet is the interesting choice. Hex is unambiguous and verbose. Base58 leaves out 0, O, I and l, which is why wallet addresses and short links use it — nobody mistypes a Base58 string read aloud.

A prefix is worth adding to anything that will be seen in the wild. A token that begins with a short tag identifying what it is makes an accidentally committed secret findable by an automated scanner and recognisable by a human reading a log. The summary reports the entropy of each string so you can decide whether the length you chose is enough for the job.

Frequently asked questions

Base58 if a person will ever read the string aloud or retype it, because it omits 0, O, I and l. Hex if it needs to be unambiguous and machine-friendly. Letters and digits for a general token where density matters more than readability.

So a leaked one is recognisable. A short tag at the front makes an accidentally committed secret findable by automated scanners and identifiable by a human reading a log — they can tell what it is and revoke the right thing without guessing.

At 32 characters from a 62-character alphabet, comfortably — that is around 190 bits. The summary reports the entropy for whatever settings you chose, so check it rather than assuming. The generation itself uses the same cryptographic random source as the UUID and password tools.