Question 1

What character sets are available?

Accepted Answer

Lowercase letters (a–z), uppercase letters (A–Z), digits (0–9), symbols (!@#$%^&*), alphanumeric, URL-safe (Base64URL characters), hex (0–9, a–f), and custom character sets. Combine sets to match your exact security or format requirements.

Question 2

Is this tool suitable for generating API keys or tokens?

Accepted Answer

Yes. This tool uses crypto.getRandomValues (CSPRNG) for all generation — not Math.random(). A 32-character alphanumeric string has ~190 bits of entropy, exceeding the 128-bit standard for API tokens. For JWT secrets or signing keys, use the dedicated key generator tools.

Question 3

What length should I use for security tokens?

Accepted Answer

Minimum 16 characters for session tokens (most apps). 32 characters for API keys (128+ bits with alphanumeric charset). 64 characters for high-security tokens or encryption key material. Longer is always safer and costs nothing in storage.

随机字符串生成器

输入

输出

常见问题