Skip to content

UUID and Secret Generator

Cryptographically secure random identifiers and secrets, generated in your browser.

Runs locally in your browser

Cryptographically secure identifiers and secrets, generated in your browser.

UUID v4

random

UUID v7

time-ordered

Hex 32

16 bytes

Hex 64

32 bytes

Base64 32

24 bytes raw

Kube Secret

base64 of 32 bytes

How it works

Which format do I pick?

  • UUID v4: random 128-bit identifier. Great for record IDs where order doesn't matter.
  • UUID v7: timestamp-prefixed, so IDs sort chronologically. Better for database primary keys because it avoids the index fragmentation that v4 causes.
  • Hex 32 / 64: raw hex tokens. Good for opaque API tokens or request IDs. 32 hex chars = 128 bits, 64 hex chars = 256 bits.
  • Base64 32: URL-safe-ish token, 24 random bytes → 32 base64 chars. Fits well in cookies and query strings.
  • Kube Secret: base64-encoded 32 random bytes, ready to paste into a Secret manifest's data: field.

Security note

All values are generated locally with crypto.getRandomValues. Nothing is sent to a server. If your threat model requires hardware-backed randomness (HSM), don't use a browser tool for that.

Frequently asked questions

What is the difference between UUID v4 and UUID v7?

UUID v4 is fully random. UUID v7 embeds a millisecond timestamp in the first bytes, so IDs sort by creation time. v7 is the better choice for database primary keys because it avoids the B-tree index fragmentation that v4 causes.

Are these UUIDs cryptographically secure?

Yes. All values are generated with the browser Web Crypto API (crypto.getRandomValues). You should still not use a browser tool to mint secrets that require hardware-backed randomness (HSM).

How do I put this into a Kubernetes Secret?

Use the "Kube Secret" format. It generates 32 random bytes and base64-encodes them, ready to paste into the data field of a Secret manifest.

Tools are ported from DevOps Daily under the MIT license.View original

More tools

JWT Decoder

Inspect any JWT in your browser. Nothing is sent to a server.

Open tool

CIDR Subnet Calculator

Parse CIDR blocks, compute ranges, split into smaller subnets, and check whether an IP lives inside a network.

Open tool