Randomness, Entropy & Secret Generation
High-entropy passwords, passphrases, identifiers, and codes — generated by your browser's CSPRNG, never by a server.
Password Generator
High-entropy passwords with a live strength meter
DICEWARE · WORDSPassphrase Generator
Memorable word-based passphrases, diceware style
UUID · V4/V7UUID Generator
Random v4 and time-ordered v7 UUIDs, in bulk
TOTP · RFC 6238TOTP Generator
Live 2FA codes from a Base32 secret
TOKEN · 256-BITAPI Key Generator
Random tokens in hex, Base64, or prefixed formats
CSPRNG · UNIFORMRandom Numbers
Unbiased integers, dice, and raw bytes from the CSPRNG
BIP-39 · MNEMONICBIP-39 Mnemonic
Generate and validate wallet recovery phrases, derive the seed
WI-FI · QRWi-Fi QR Builder
Make a scannable QR code that joins your network
Burn-After-Reading Link
Zero-knowledge secret sharing
Choosing the right randomness & secrets tool
Every key, password, token and nonce is only as strong as the randomness behind it. These generators draw from the browser's cryptographically secure random number generator (crypto.getRandomValues), never Math.random(), and use rejection sampling so every character or number is exactly equally likely. Results are generated on your device and never transmitted or stored.
Use the password generator for accounts stored in a password manager (16+ characters), the passphrase generator for secrets you must type or remember, and the API token generator for 256-bit machine secrets. UUIDs are identifiers, not secrets — prefer v7 for database keys and v4 where creation time must stay private. Each generator shows its entropy in bits so you can see exactly how strong the result is.
How to Decode a JWT — and 7 Security Mistakes That Get Tokens Forged
What's inside a JSON Web Token, how to decode and verify one safely, and the real-world JWT vulnerabilities — alg:none, key confusion, weak secrets — with the fix for each.
6 MIN READRANDOMNESS · PASSWORDSPassword Entropy Explained: How Strong Is Your Password, Really?
How password strength is actually measured: the entropy formula, a crack-time table for random passwords and passphrases, why human-chosen passwords score far lower, and current NIST rules.
6 MIN READIDENTIFIERS · RFC 9562UUID v4 vs UUID v7: Which Should You Use for Database Keys?
UUIDv7 sorts by time and keeps database indexes fast; UUIDv4 is fully random. Compare their structure, collision odds, performance and privacy trade-offs, with code for Postgres, JavaScript and Python.
5 MIN READ