Password & Passphrase generator
Cryptographically random, generated entirely on your device via crypto.getRandomValues; nothing is ever sent to a server. Passwords mix random characters; passphrases chain random dictionary words, which are easier to type and remember while still being strong.
Hash generator
A hash turns any input into a fixed-length fingerprint: the same input always produces the same output, and even a one-character change scrambles it completely. Useful for checking file integrity or comparing data without exposing the original content. MD5, SHA-1, SHA-256, SHA-384, SHA-512, SHA3-256, SHA3-512, CRC32 and Adler-32 are all computed live as you type.
HMAC generator
HMAC combines a hash function with a secret key to prove a message wasn't tampered with and that it came from someone who knows that key, commonly used to sign API requests and webhooks. Supports HMAC-MD5, HMAC-SHA1, HMAC-SHA256, HMAC-SHA384, HMAC-SHA512, HMAC-SHA3-256 and HMAC-SHA3-512.
UUID / ULID generator
Unique identifiers for database rows, objects or requests. UUID v4 is fully random; UUID v7 and ULID embed a timestamp so IDs sort chronologically, which is handy for database primary keys since they insert in order. All generated with cryptographically secure randomness.
Token generator
Random strings for API keys, session tokens or one-time secrets, with a configurable character set, an optional prefix (e.g. sk_live_) and a target strength.
Slug generator
Turns any text (like an article title) into a clean, URL-safe slug: lowercase, with no spaces or special characters. Understands Macedonian Cyrillic transliteration.
Lorem Ipsum generator
Classic Latin filler text used to mock up layouts and designs before real content is ready, so meaningful words don't distract from the visual design.
QR Code generator
Turns any text, URL, or a value generated elsewhere on this page (password, token, UUID...) into a scannable QR code, encoded and rendered entirely in your browser.
.htpasswd credential generator
Generates a username:hash line for Apache Basic Auth .htpasswd files. bcrypt is the modern, recommended choice; apr1-MD5 and SHA-1 are kept only for compatibility with older servers.
Identicon / avatar generator
A small deterministic avatar derived from a hash of the text you enter: the same input always produces the same image, handy as a placeholder avatar for usernames or emails.
Synthetic Test Data Generator
Throwaway name, email, phone and address combinations for testing forms, drawn from real countries and cities (US, UK, Greece, France, Italy, Germany, Brazil). Streets are always fictional placeholder names (e.g. "Test Street") and never a real street. Emails always use the IANA-reserved example.com/.org/.net domains. Phone numbers only ever use ranges telecom regulators have officially reserved for fictional/testing use and guaranteed to never be assigned to a real subscriber (US/Canada NANP 555-01xx, UK Ofcom 07700 900xxx). Every generated phone number uses one of these two formats regardless of the profile's country, because no equivalent publicly documented reserved range has been confirmed for the other supported countries.