API Token Generator: Create Secure Keys
You start a new project and the app asks for an API key. Typing something guessable like your email is an invitation to trouble. This tool mints keys from your browser secure random generator: hex, base64, or alphanumeric. You can add a prefix, such as keys starting with sk. Nothing reaches a server; everything happens on your device. Length is in bytes, hex output shows twice as many characters.
Step by step
- Enter a length; 8 to 256 bytes are accepted.
- Pick a format: hex, Base64, Base64URL, or alphanumeric.
- Optionally type a prefix; only letters, digits, dash and underscore pass.
- Press generate and wait for the result.
- Copy it to the clipboard and paste into your secret manager.
- Never share the key over email or chat; revoke it at once if leaked.
Example scenario
Intern developer Mert needs to call a weather service for a school project. Instead of the sample key from lecture notes, he opens the tool and mints a 32-byte base64 key. He writes it into the project env file and keeps that file out of the public repo. Reviewing the code, the teacher sees an empty template where the key belongs, and Mert earns full marks.
Check your result
Look at the output; two runs in a row must differ. If you set a prefix, confirm the underscore separator. Base64URL output must hold no plus, slash or equals signs. Strip leading and trailing spaces where you paste the key.
Frequently asked questions
Is the key truly random?
Yes. The browser cryptographic generator is used, not a predictable math-library function.
What does length mean?
It is the byte count. Hex doubles it in characters; 32 bytes means 64 hex characters.
What is the prefix for?
It helps you recognise the key; sk-prefixed ones are secret keys, for example. A prefix adds no secrecy.
Does the key reach a server?
No. Generation and copying stay fully in the browser; no network request happens.
Which format should I pick?
Base64URL for URLs and file names, hex for database storage, alphanumeric when humans will read it.
Open the tool: API Token Generator →
Keep an original copy before processing your file. Examples are illustrative; results depend on your document.