generatekey.app
Free generator for passwords, passphrases, UUIDs (v4/v7), hex and base64 secrets, JWT signing keys, Ed25519 SSH keys and PINs. Everything runs locally with the Web Crypto API — nothing leaves your browser.
Free generator for passwords, passphrases, UUIDs (v4/v7), hex and base64 secrets, JWT signing keys, Ed25519 SSH keys and PINs. Everything runs locally with the Web Crypto API — nothing leaves your browser.
This page is designed to help you find out whether generatekey.app is good and if it is the right choice for you.
generatekey.app is a free online generator for cryptographic keys, secrets and passwords, built for developers. It covers the everyday needs in one page: strong passwords, memorable Diceware passphrases from the EFF wordlist, UUID v4 and time-ordered v7, hex and base64url secrets, JWT signing keys for HS256 and HS512, ready-to-use SSH Ed25519 key pairs in OpenSSH format, and random PINs.
The core promise is that nothing leaves your browser. All randomness comes from the Web Crypto API with rejection sampling, generation is fully client-side on a static page with a strict Content Security Policy, and no generated value is ever transmitted, logged or stored. Each generator displays its entropy in bits and the CLI command it replaces, such as openssl rand -base64 32 or ssh-keygen -t ed25519. Every tool also has its own page with a short, practical explanation of when and why to use it.
Listed in
Everything is generated locally in your browser with the Web Crypto API. Nothing is ever sent to a server, and you can verify it yourself: open the network tab and watch, no generated value ever leaves the page. It bundles 8 generators in one fast page (password, passphrase, UUID v4/v7, hex, base64, JWT secret, SSH Ed25519 key, PIN), each with an entropy indicator in bits and the CLI command it replaces, like "openssl rand -base64 32". No accounts, no ads, no cookie banner.
Most online generators run server-side or are loaded with ads and trackers, so you have to trust them blindly. generatekey.app is verifiable by design: static page, strict Content Security Policy, no third-party scripts, and generation happens only on your device. The randomness is done properly too: crypto.getRandomValues with rejection sampling (no modulo bias), never Math.random, and the SSH keys are validated against ssh-keygen. It is also honest about its limits: for a production SSH key, the page itself recommends generating locally.
Developers, DevOps and security-minded people who regularly need a quick secret: a JWT signing key, an API secret, a batch of UUIDs, an SSH key for a test environment or a CI sandbox. It replaces a terminal one-liner when you are not in a terminal. Secondary audience: anyone who needs a strong password or passphrase without installing anything.
Built in one evening by an indie developer who was tired of retyping "openssl rand -base64 32" and never fully trusting ad-riddled online generators. The goal was the browser equivalent of the CLI commands developers already know, with privacy you can check instead of promises you have to believe. It is meant to stay free, fast and maintenance-free. There is also a small Matrix easter egg for those who follow the white rabbit.
Plain HTML and vanilla JavaScript, zero runtime dependencies and no framework. All cryptography comes from the browser's native Web Crypto API (crypto.getRandomValues and crypto.subtle for Ed25519 keys). The passphrase generator embeds the EFF large wordlist. The site is fully static, served by nginx in a small Docker container, with a strict Content Security Policy and self-hosted, cookieless analytics.
We have collected here some useful links to help you find out if generatekey.app is good.
Check the traffic stats of generatekey.app on SimilarWeb. The key metrics to look for are: monthly visits, average visit duration, pages per visit, and traffic by country. Moreoever, check the traffic sources. For example "Direct" traffic is a good sign.
Check the "Domain Rating" of generatekey.app on Ahrefs. The domain rating is a measure of the strength of a website's backlink profile on a scale from 0 to 100. It shows the strength of generatekey.app's backlink profile compared to the other websites. In most cases a domain rating of 60+ is considered good and 70+ is considered very good.
Check the "Domain Authority" of generatekey.app on MOZ. A website's domain authority (DA) is a search engine ranking score that predicts how well a website will rank on search engine result pages (SERPs). It is based on a 100-point logarithmic scale, with higher scores corresponding to a greater likelihood of ranking. This is another useful metric to check if a website is good.
The latest comments about generatekey.app on Reddit. This can help you find out how popualr the product is and what people think about it.
Do you know an article comparing generatekey.app to other products?
Suggest a link to a post with product alternatives.
Is generatekey.app good? This is an informative page that will help you find out. Moreover, you can review and discuss generatekey.app here. The primary details have been verified within the last quarter. So they could be considered up to date. If you think we are missing something, please use the means on this page to comment or suggest changes. All reviews and comments are highly encouranged and appreciated as they help everyone in the community to make an informed choice. Please always be kind and objective when evaluating a product and sharing your opinion.
