API Key Generator
Generate cryptographically secure API keys with configurable format, length, and entropy. What you enter stays in your browser.
Click Generate to create secure API keys
Key Statistics
Keys are generated entirely in your browser using the Web Crypto API. No key is ever stored or sent to a server.
API Key Generator FAQ
Are these keys cryptographically secure?
Yes. Every key comes from crypto.getRandomValues in the Web Crypto API. Base62 maps bytes to characters by rejection sampling rather than a modulo fold, so all 62 characters are equally likely and the entropy figure shown is the real one rather than an upper bound.
How much entropy does each Base62 character carry?
Base 62 gives log2(62), about 5.95 bits per character. The default 32 characters is therefore about 190 bits, which is far past the point where brute force is a consideration. The tool recalculates the figure as you change the length.
Why is Base62 the default for API keys?
It is letters and digits only. Nothing in it needs percent-encoding in a URL, quoting in a shell, or escaping inside a JSON string, so the same key drops unchanged into a query string, an Authorization header, an environment variable or a config file.
What does collision probability mean?
It estimates the chance that two independently generated keys come out identical, using the birthday approximation across one million keys. At 32 characters of Base62 the figure is far below any rate worth designing around, so treat key collision as a non-risk and spend the effort on how the keys are stored instead.
Need to share API keys securely?
Don't paste API keys into Slack or email. Use CredenShare to deliver them with end-to-end encryption, expiration, and audit logging.