Strong by chance. Private by design.
Create passwords and random values with your browser’s secure cryptography. Generated values are never sent or saved.
Useful randomness.
Without the trail.
Tools for safer accounts, development, testing, and everyday decisions.
Password generator
Create a strong random password locally in your browser. Choose the length and character types, then copy it in one click.
OPEN TOOL →Random number generator
Generate one or many random integers in a range, with an option to prevent duplicates. Everything runs in your browser.
OPEN TOOL →UUID generator
Generate RFC 9562 UUID v4 or time-ordered UUID v7 identifiers locally, ready for code, databases, and test fixtures.
OPEN TOOL →Hash generator
Calculate SHA-256, SHA-384, or SHA-512 hashes from text or files locally without uploading the input.
OPEN TOOL →PIN generator
Create random numeric PIN codes from 3 to 12 digits. Generate up to 100 at once, privately in your browser.
OPEN TOOL →Passphrase generator
Combine 4–12 securely selected words from the EFF long wordlist of 7,776 words, with adjustable separators and an optional number.
OPEN TOOL →Username generator
Generate 1–6 random English words from the EFF list. Availability on other sites is not checked.
→URL encoder, decoder & parser
Encode a URL component or inspect an absolute URL. Decode keeps + unchanged; duplicate query parameters remain visible.
→Unix time converter
Convert seconds (up to 3 decimals), integer milliseconds, or ISO dates. Use YYYY-MM-DD (UTC) or a timestamp with seconds and Z / ±HH:MM.
→HMAC generator
Compute HMAC-SHA-256/384/512 locally from a message and key. UTF-8 or hexadecimal key, up to 4096 bytes. This does not verify JWTs.
→Password pattern checker
Reports length, repeated characters, simple sequences, whitespace and six English fragments. Not a strength score, breach check or security guarantee. Maximum 4096 characters.
→JSON formatter & validator
Format, validate and minify JSON locally.
→Base64 / Base64URL encoder–decoder
Encode text or binary files and decode Base64/Base64URL locally.
→JWT decoder
Inspect a compact JWT header, payload, signature and dates locally, without verifying its signature.
→Your secrets never become our data.
KeyWoven uses the Web Crypto API supplied by your browser. Passwords, PINs, UUIDs, random numbers, hashes, and passphrases are produced on your device.
- No account required
- No generated-value history
- No upload or generation API
Good questions.
Straight answers.
Is KeyWoven free?+
Yes. All tools are available without an account or payment.
Can KeyWoven see generated values?+
No. The generators run locally in your browser and do not send their output to KeyWoven.
What should I do with a new password?+
Save it in a trusted password manager, use it for only one account, and enable multi-factor authentication when available.