Secure randomness
The tool uses the browser's cryptographically secure random source and rejection sampling rather than Math.random() or naive modulo mapping.
Alphabet—
Entropy / string—
Search space—
Batch collision risk—
Generated—
Random source—
Generated values
Security QA
Developer recipe
Observed character distribution
This is a transparency view of the current batch, not a statistical certification. The generator itself avoids modulo bias by rejecting random bytes outside an even mapping range.
| Character | Count | Observed share |
|---|
Policy mode
“Require every enabled group” guarantees at least one character from each chosen group, then securely shuffles the full result. This is useful for systems with composition rules.
Custom alphabets
Use human-safe voucher alphabets, Base32-like sets, product-specific characters or Unicode symbols. Duplicate characters are removed automatically.
Collision planning
The estimator uses the birthday bound to show how batch size, alphabet size and token length interact. For critical identifiers, keep a database uniqueness constraint too.
Prefixes and suffixes
Prefix and suffix text is not counted as random entropy. The requested random length applies only to the generated body.
Privacy
No values, configuration or generated output are sent to a server. Downloads are created locally.