Crypto Token Generator
Generate API keys and random cryptographic salt bytes.
Sensitive data: Anything you enter is processed in your browser only. It is never uploaded or logged on a server.
Generating API keys and cryptographic salt
API keys and random salts should come from secure random number generators, not timestamps or Math.random. Hex or base64 output formats suit different storage and transport constraints in databases and headers.
Salts must be unique per password hash record. Reusing salts across users defeats the purpose of slow KDFs. Key length should meet algorithm requirements (256 bits for AES-256).
Display generated keys once and store hashed on servers. Clipboard history on shared machines is a leak vector; clear after copy.
Generate keys locally during service bootstrap. Client-side generation keeps provisioning secrets off remote key-generator SaaS tools.
Reference Guide
Security tool - all processing runs locally in your browser. No data is sent to a server.
Operation: api-key-gen
Paste input, click Run, and copy the result. For two-input tools, fill both fields before running.
No input required - a result is generated automatically when you open this tool. Click Run again for a new value.