Token Generator Guide

A token is a string a program may use as a secret or as an identifier. Token Generator makes random strings using your browser’s cryptographic random source. The output itself is sensitive if you use it as a real secret.

Check the controls with throwaway values

Set How many to 2 and Length to 12, then choose Generate. Under Tokens, you should see two lines with twelve characters each. The exact characters are different each time. a-z, A-Z, and 0-9 are checked by default; symbols adds punctuation if you enable it.

If you uncheck everything, this implementation falls back to lowercase letters rather than returning an error. A checked set makes characters available; it does not guarantee every generated string contains one character from every selected set. If an application demands a particular character type, inspect the result against that rule.

Before using a real token

Choose the length and allowed characters your receiving application expects. Store the result in a secret manager or another appropriate place; do not put it in a URL, issue comment, or screenshot. Copy puts it on the clipboard, where other software on your device may read it. The generator does not upload the values, but it cannot protect what you do with them afterward.

Where your input goes

Processing runs in your browser. The tool does not upload your input to ilham.dev.

Related guide

For more background, read Security and Cryptography Basics for Developers.