🛡️

Secret Key Generator

Generate strong secret keys for JWT signing, symmetric encryption, HMAC signing and other cryptographic operations. Everything is generated in your browser using the Web Crypto API (crypto.getRandomValues), so no secret ever leaves your device.

Code Maker
Very Strong 381 bits entropy

Excellent for API keys and security tokens.

Character Sets
Generated Output
JvV7LvXVuSezdODXFTC8MiREVtBoTNwz1ve0RSHY2b1dXtfvB6t7A1sF0eybckwl
aMYnviPiia3DzJxaqGp5rM7oMLlDryx4TMnS5lxsaqPTInWkuelgwFUzUuw45j0w

Frequently Asked Questions

What length should a JWT secret be?

For HS256, at least 32 bytes (256 bits) is required. Use a 44-character alphanumeric key for a safe margin.

Can I use this for AES encryption keys?

For AES-256 you need exactly 32 bytes. Generate a 32-character key and encode it as Base64 or hex for use in most libraries.

Related Tools

🔑
API Key Generator
Cryptographically random API keys instantly.
🪪
Token Generator
Random auth tokens and session tokens.
🔐
Password Generator
Strong, random passwords in one click.

Further Reading

✍️
What Is a JWT Secret? (And How It Differs From an API Key)
A JWT secret signs and verifies tokens, an API key identifies an application. Here's what actually separates them, and what happens if the secret leaks.
← Generators