Crypto Password & API Key Gen
Utilix Crypto Password & Key Gen is a hardware-backed CSPRNG security utility that generates high-entropy passwords, memorable passphrases, UUID v4 identifiers, and 256-bit hex JWT secrets using window.crypto.getRandomValues().
How to Generate Cryptographically Secure Passwords and 256-Bit JWT Secrets in Browser?
Use Utilix Crypto Password & Key Gen to sample entropy directly from your operating system CSPRNG (`window.crypto.getRandomValues()`), generating passwords, 5-word passphrases, UUID v4s, and 64-character hex API keys with live bits-of-entropy math.
How to use Crypto Password & API Key Gen
- Configure Length & Character Sets: Slide password length (8–64 chars) and toggle uppercase, lowercase, digits, and symbols.
- Verify Bits of Entropy & Crack Time: Check the live Shannon entropy calculation (e.g., 128+ bits) and GPU resistance rating.
- Copy Password, Passphrase, UUID, or 256-Bit Key: Copy any generated credential in 1 click.
Frequently asked questions
Why is Math.random() unsafe for password generation?
Math.random() uses a predictable pseudo-random PRNG (xorshift128+). Utilix strictly uses `window.crypto.getRandomValues()`, which draws entropy from your OS kernel CSPRNG.
How many bits of entropy do I need for production security?
80+ bits resists offline GPU clusters for centuries, while 128+ bits is the cryptographic standard for API keys and JWT signing secrets.
Does the generator avoid ambiguous characters like 0/O and 1/l/I?
Yes, our default character alphabet excludes visually ambiguous glyphs so passwords remain easy to read when needed.
Can I use the 64-character hex string for HMAC-SHA256 JWT signing?
Yes, 64 hexadecimal characters equal 32 bytes (256 bits) of cryptographic entropy.
Are generated passwords ever transmitted over the network?
Never. Generation occurs 100% locally in your browser.