API Key Generator

Generated 2 API key(s) with a 32-character secret over the base64url alphabet (192 bits of entropy).

How it works

• Read the optional prefix, secret length, alphabet and count.
• Drew each secret character from the platform CSPRNG over the chosen alphabet with rejection sampling.
• Joined the prefix and the secret with an underscore so the key is recognisable but the secret stays independent.

• A seed was supplied for a reproducible example; real keys use the platform CSPRNG.
• Treat a generated key as a secret: paste it straight into a secret manager and never into a URL or a commit.

Methodology

1. Assemble the alphabet for the chosen encoding.
2. Draw one character at a time from the platform CSPRNG using rejection sampling, so no character is biased by a modulo shortcut.
3. Prefix the secret with the caller's label and an underscore when a prefix is present.
4. Report the alphabet size and the entropy estimate length × log2(alphabetSize).

Usage

1. Enter an optional prefix such as `sk_live` or `app`.
2. Choose the secret length and the alphabet (base62, base64url, hex or base32).
3. Generate the key and copy it directly into your secret manager.

Examples

These are examples, not current values: they use fixed inputs, while the interactive tool computes live results in your browser.

Two reproducible base64url keys

{
  "prefix": "sk_test",
  "length": 32,
  "count": 2,
  "alphabet": "base64url",
  "seed": "example"
}

A 48-character base62 key

{
  "prefix": "pk",
  "length": 48,
  "alphabet": "base62",
  "seed": "example"
}

A 64-character hex key

{
  "length": 64,
  "alphabet": "hex",
  "seed": "example"
}

Limitations

A random key is only the beginning

A key generator produces a secret with a known amount of randomness. It cannot scope the key, rotate it or revoke it. Pair it with per-key permissions, an expiry and a rotation policy.

Because the key is a bearer secret, its safety depends on where it is stored. Keep it out of URLs, client bundles and version control; use a secret manager and environment injection.