API Key Generator

It uses crypto.getRandomValues(), the browser's cryptographically secure random number generator — the same quality of randomness used for real security tokens, not Math.random().

Enter a number for the byte length (defaults to 32 bytes = 64 hex characters if left blank); the output hex string is always twice as many characters as the byte count.

Yes — all three share the identical cryptographically random hex generation logic; they're just named for different common use cases (API key, general token, cryptographic nonce).

No — it's generated entirely in your browser and never transmitted or logged; treat it as sensitive once generated and store it securely yourself.