Developer Security
UUID & Token Generator
Generate random identifiers you can trust: UUID v4 values for records and correlation IDs, and high-entropy tokens for API keys, session identifiers and one-time links.
Values come from crypto.getRandomValues() in your browser. They are never sent anywhere and are discarded as soon as you leave or clear the page.
Choosing the right identifier
- UUID v4 -- database keys, request/correlation IDs, idempotency keys. Public and safe to log.
- Random token (32 bytes) -- API keys, password-reset links, session identifiers. Treat as a secret and never log it.
- Store only a hash of a token server-side so a database leak does not hand attackers working credentials.
- Give every token an expiry and a revocation path; long-lived static keys are one of the most common breach causes.
Related tools
HMAC Generator
Generate HMAC-SHA256/384/512 signatures for webhook and API verification, entirely in-browser.
TOTP 2FA Code Generator
Turn a Base32 secret into live six-digit authenticator codes to test MFA enrolment.
Password Strength Checker
Analyse password length, character variety and weak patterns locally in your browser.