What is a CSRF token?
A CSRF token is an unpredictable value used to confirm that a state-changing request originated from the expected application session.
Security
CSRF Token Generator
Generate cryptographically secure CSRF tokens locally in your browser.
Tool
CSRF Token Generator
Generate cryptographically secure CSRF tokens locally in your browser.
This tool runs in your browser. Your input is processed locally and is not uploaded.
About this Tool
Use this CSRF token generator to create high-entropy values suitable for synchronizer-token patterns and development workflows. Tokens are generated locally with the browser cryptography API.
Examples
- Generate a 256-bit CSRF token
- Generate a hexadecimal CSRF token
- Generate a Base64URL CSRF token
Frequently Asked Questions
How long should a CSRF token be?
A token should contain sufficient random entropy. A value based on at least 128 random bits is commonly appropriate.
Is generating a token enough for CSRF protection?
No. The application must also store, send and validate the token correctly for protected requests.
Related Tools
Password Hash Generator
Create salted password hashes using configurable password-hashing algorithms and parameters.
TOOLRandom Token Generator
Create random tokens with configurable byte length and output encoding.
TOOLSecure Random String Generator
Create secure random strings from configurable alphabets without server processing.
TOOLOTP Generator
Create random one-time password codes with configurable length and character format.
TOOLTOTP Generator
Create TOTP codes from a Base32 secret with configurable digits, period and hash algorithm.
TOOLSecret Key Generator
Create cryptographically secure secret key material with selectable bit length and encoding.
TOOL