Keys, secrets and identifiers

Choose a format, configure your framework or generate values locally.

Application secrets

Variable names, formats and local commands in one place.

Minimum key sizes for HMAC signing, and how to encode and store them.

Random identifiers or time-ordered IDs, with the trade-offs explained.

Ed25519 is a convenient modern default. Compatibility and your security policy decide the exceptions.

What the command actually produces, and how to get the same bytes without it.

The right call in eight languages, and the popular ones that quietly aren't random.

Local generation helps. Trust in the code, your browser and your device still matters.