ZeroUtil

Secure Token Generator

Generate cryptographically secure random tokens in base64url, hex, alphanumeric or UUID v4 format.

Maintained by

32
Characters
192
Entropy bits

How to generate secure tokens

  1. Choose a token format: base64url for URLs and cookies, hex for logs and config files, alphanumeric for strict input fields, or UUID v4 for identifiers.
  2. Set length and count for non-UUID formats. Longer tokens have more entropy and are harder to guess.
  3. Generate and copy the tokens. Store real production secrets in a vault or password manager immediately.

What makes the tokens secure

The generator uses browser cryptographic randomness through crypto.getRandomValues and crypto.randomUUID. Alphanumeric output uses rejection sampling to avoid modulo bias.

When to use it

Use it for local development secrets, webhook verification tokens, CSRF test values, nonce experiments, invite codes or one-off scripts that need random identifiers.

Operational advice

Generated tokens are only shown in the page state. Copy them into a secure location, avoid committing them to git, and rotate any token that may have been exposed in logs or screenshots.

Frequently Asked Questions

Are these tokens generated on the server?

No. Tokens are generated in your browser using Web Crypto randomness. ZeroUtil does not receive or store the generated values.

Which format should I choose?

Use base64url for URL-safe secrets, hex when a system expects hexadecimal strings, alphanumeric for restrictive forms, and UUID v4 when you need a unique identifier rather than a secret.

How long should a token be?

For secrets, 32 base64url characters or 64 hex characters are strong defaults. Shorter values may be fine for non-secret identifiers, but authentication tokens should preserve high entropy.

More Security & Privacy