Base64URL token generator

Base64URL is a URL-safe variant of Base64 encoding. It replaces + with - and / with _, and strips the = padding characters. The result is a compact, alphanumeric string that can be embedded in URLs and HTTP headers without escaping. A 32-byte input produces a 43-character token.

Base64URL is the standard encoding for JWTs (JSON Web Tokens), OAuth access tokens, and many modern API key formats. It packs more entropy per character than hex — 6 bits per character instead of 4 — so a Base64URL token is significantly shorter than its hex equivalent at the same security level.

Unlike standard Base64, the URL-safe variant removes trailing = padding characters. The result is cleaner in URLs and simpler to work with. When decoding, padding can be safely re-added if needed — most modern libraries handle this automatically.