Generators

UUIDs, passwords, secret keys and hashes, made in your browser, all on one page; each also has a page of its own. Random values come from its cryptographic random generator, and nothing is sent anywhere or saved.

UUID

Version 4 (random) or version 7 (starting with the time, so they sort by creation), one or a thousand at a time, in upper case or without dashes. Also known as GUIDs. The UUID page also reads one back: its version, and when it was made.

Password

Any length from 6 to 64, with the kinds of characters you choose (each one used at least once), look-alikes left out if you like, and its strength in bits.

Secret key

16, 32 or 64 random bytes for an API key, a JWT or webhook signing secret or a session key, in hex, Base64 or Base64URL.

Hash

The SHA-256, SHA-512, SHA-1 and MD5 hashes of any text or file at once, in hex or Base64, and HMAC signatures with a key you type. Paste a published checksum to check a download against it.

Private: made on your device

Everything is generated in your browser by its cryptographic random generator (crypto.getRandomValues), the one Web Crypto uses for keys. Nothing is sent anywhere and nothing is saved: copy what you need, and generating again or leaving the page discards the rest.

Questions

Are these random enough for security?

Yes: they come from the browser's cryptographic random generator, the one Web Crypto uses for keys.

Can I trust a website to make my passwords?

Here nothing leaves your device: the page makes them itself and sends nothing. Once it has loaded, you can even disconnect from the network and keep generating.