My token was rejected by the API

check allowed characters. Some systems reject special characters, or expect specific formats (hex only, alphanumeric only). Regenerate with the right character set.

I need to use this in a shell script

avoid special characters that need escaping (`$`, `!`, `'`, `\`, spaces). Stick to base62 or hex.

Is this safe for production secrets?

the randomness is cryptographically secure, yes. But you generated it in a browser tab. Transfer it securely (not Slack, not email) and store it in a secrets manager. Don't commit it to git.

Math.random() is fine for my use case, right?

if it's test data, shuffling, or anything where predictability doesn't matter, sure. For API keys, tokens, or anything security-adjacent, absolutely not.

How do I calculate the entropy of my string?

`length × log2(charset_size)`. Base62, 32 chars = `32 × 5.95 ≈ 190 bits`. More than enough.

Random String Generator

Generate random alphanumeric strings of any length.

Length: 32

Uppercase (A-Z)

Lowercase (a-z)

Numbers (0-9)