Secure random token generator
Generate random bytes and format them as hexadecimal or Base64url tokens. Your inputs stay in this browser tab.
Your result
A little input. A useful result.
Your result will appear here.How to use secure random token generator
Generate random bytes and format them as hexadecimal or Base64url tokens. This free tool runs locally after you choose to start.
- Enter your own values, or start with the visible example.
- Adjust random bytes per token (16–128), tokens (1–50), encoding as needed.
- Choose the action button. Review the result, then copy text or download a file when available.
- Choose Clear all when finished to remove inputs and results from the interface.
Limits, without the small print.
All cryptography runs locally in Web Crypto. Never paste live secrets into a device you do not trust. Inputs are not stored or sent. A compromised browser or served application can read inputs.
One job runs at a time. You can cancel it; jobs stop after 30 seconds. Browser and device capabilities affect performance.
Understand the safeguards →What this tool does
Generate random bytes and format them as hexadecimal or Base64url tokens.
Example input
Random bytes per token (16–128): 32 Tokens (1–50): 3 Encoding: Base64url
What to expect
Choose Run to calculate the example in your browser. The result can be copied or cleared.
A couple of useful answers.
Does secure random token generator upload my data?
No. This tool processes your input in a browser worker. Your text and files are not sent to an application server. The static host receives page and asset requests; see our privacy explanation.
Is this tool free for work and study?
Yes. No account, paid API, usage subscription or watermark fee is required. You remain responsible for your content rights and checking results. Hosting providers and their free tiers are separate from this open-source software.
What should I check before relying on the result?
All cryptography runs locally in Web Crypto. Never paste live secrets into a device you do not trust. Inputs are not stored or sent. A compromised browser or served application can read inputs. Review important outputs against the source, especially financial, legal, identity, medical and research calculations.