Question 1

How do I generate a session secret?

Accepted Answer

Pick the byte length you want (32 or 64 bytes), and the tool uses your browser's crypto to produce a random lowercase hex string. Then click to copy the raw value or copy a ready-made .env line.

Question 2

What is the difference between the copy raw value and copy .env line options?

Accepted Answer

The raw value is just the hex string itself, useful for pasting into a config field or secret manager. The .env line wraps that same value as a ready-to-paste environment variable assignment so you can drop it straight into a .env file.

Question 3

Should I choose 32 bytes or 64 bytes?

Accepted Answer

32 bytes (256 bits) is plenty for most session secrets and signing keys, while 64 bytes (512 bits) gives extra margin if a library or policy expects a longer key. When in doubt, 32 bytes is a safe and common default.

Question 4

Is it free, and does it work offline without an account?

Accepted Answer

Yes, the generator is completely free and needs no account. Because all generation happens in your browser, it keeps working offline once the page has loaded.

Question 5

Is the generated secret uploaded or stored anywhere?

Accepted Answer

No. The secret is created locally with your browser's crypto and is never uploaded, stored, or sent to any server. Once you leave or refresh the page the value is gone, so copy it before closing the tab.

Session Secret

FAQ