Key & Secret Generator
Every kind of key and secret a developer or admin needs, in the right format to paste straight in: API keys, JWT and session secrets, framework keys, encryption keys, 2FA secrets, recovery codes, and SSH, WireGuard and signing key pairs. Made in your browser, never sent anywhere.
- Made on your device
- 30+ key types
- Ready-to-paste formats
What do you need?
Your key
Handling secrets safely
- Never commit secrets to Git. Keep them in environment variables or a secrets manager, and add
.envto.gitignore. Leaked keys on GitHub are found by bots within minutes. - Use a different secret for each environment (development, staging, production) and each app.
- Rotate keys when someone leaves or a key may have leaked, and on a schedule for important systems.
- Private keys stay private: share only the public key (SSH, WireGuard, JWT verification). Protect SSH private keys with a passphrase:
ssh-keygen -p -f yourkey. - Don't paste secrets into AI chatbots, tickets or chat apps.
How they're made
- Random values come from your browser's cryptographic generator (
crypto.getRandomValues), the same source the operating system uses for TLS. - RSA, ECDSA and Ed25519 key pairs are made by your browser's built-in Web Crypto. WireGuard (X25519) keys use our own implementation, checked against the official test vectors.
- Nothing is sent to our server or stored. Copy or download what you need before leaving the page.
- For human passwords, use the Password Generator; to store user passwords, hash them with bcrypt in the Hash Generator.