What makes a good API key?
A good API key has enough entropy to be unguessable, uses an alphanumeric character set for easy copy-paste, and often includes a prefix like sk_live_ or prod_ to identify its environment or service at a glance. KeyForge generates keys from the same cryptographic source your browser uses for TLS connections.
Stripe uses sk_live_ and pk_live_; GitHub uses ghp_; OpenAI uses sk-proj-. Adding a prefix makes keys identifiable in logs, error messages, and environments. Use the Prefix field to match any format you need.
Use prefixes to separate environments: sk_test_ vs sk_live_, dev_ vs prod_. Generate multiple keys at once for rolling secrets across services — choose up to 50 per batch.
What is an API key?
An API key is a unique identifier used to authenticate requests to an API service. It typically consists of a random string of characters, often with a prefix that identifies the key's purpose or environment.
How do I add a prefix to my API key?
Type your prefix (e.g., sk_live_, ghp_, prod_) into the Prefix field. It will be prepended to every generated key without affecting the random portion.
What length should my API key be?
32 characters is a good minimum for most services. For higher security requirements, use 48 or 64 characters. KeyForge supports lengths from 4 to 256 characters.
Can I generate multiple API keys at once?
Yes. Set the 'How many' field to any number from 1 to 50. Useful for seeding multiple environments, rotating keys across services, or generating batch credentials.
Are these keys really secure?
Yes. Keys are generated using crypto.getRandomValues, the browser's cryptographically-secure random number generator. No server ever sees or stores the keys.