How secure are the generated keys?

Keys are built from raw bytes produced by the browser's crypto.getRandomValues CSPRNG. With 32 bytes you get 256 bits of entropy, far beyond what is brute-forceable.

Does the encoding change the security?

No. Hex, base62 and base64url only change how the same underlying random bytes are displayed. Base62 is rejection-sampled per character to avoid bias and preserve full entropy.

Are the keys sent or logged anywhere?

No. Generation happens entirely in your browser. Keys are never transmitted or stored, so save them somewhere safe before leaving the page.

API Key Generator

Generate secure random API keys in hex, base62 or base64url, with an optional prefix.

API key generator

Generate cryptographically secure API keys and secret tokens with up to 64 bytes (512 bits) of entropy. Add a prefix such as sk_live_ to match common conventions, and choose hex, base62 or base64url encoding.

Keys are produced entirely in your browser with the Web Crypto API. It is privacy-first: nothing is transmitted or logged. Copy and store your key securely — this tool keeps no record of it.