🔑

API Key Generator

Generate long, high-entropy API keys suitable for authenticating services and applications. Supports custom prefixes for easy identification (e.g. sk-, pk-, live_).

Code Maker
Very Strong 191 bits entropy

Excellent for API keys and security tokens.

Character Sets
Generated Output
udxbsaXjGQBtQv5vWus2sIh57hWVMg2i
cLN1xrN11pW8W2j5ucIHWJNXfmHsEbO9

Frequently Asked Questions

How long should an API key be?

A minimum of 32 characters is recommended. At 32 characters from a 62-character set you get ~190 bits of entropy — effectively impossible to brute-force.

Should API keys include symbols?

Generally no. Many systems pass API keys in HTTP headers or URLs where symbols can cause encoding issues. Stick to alphanumeric characters for maximum compatibility.

What is the sk- / pk- prefix convention?

Prefixes like sk- (secret key) and pk- (public key) help you identify key type at a glance and make accidental exposure easier to detect in logs.

Related Tools

🔐
Password Generator
Strong, random passwords in one click.
🪪
Token Generator
Random auth tokens and session tokens.
🛡️
Secret Key Generator
Encryption keys and JWT secrets.

Further Reading

🔑
API Key vs Session Token vs Access Token: What's the Difference?
Three kinds of secret string that all sound similar and do genuinely different jobs. Here is what actually separates them.
🎲
True Randomness vs Pseudo-Randomness: Why It Matters for Code Generation
Not all randomness is equally random. Here is the real difference between a cryptographically secure generator and the everyday kind.
✍️
What Is a JWT Secret? (And How It Differs From an API Key)
A JWT secret signs and verifies tokens, an API key identifies an application. Here's what actually separates them, and what happens if the secret leaks.
← Generators