Terms & Conditions
Free for any use, provided with no warranty, and no substitute for having your system reviewed.
Use
The generators are free to use for anything, including commercial work, work inside a company, and values that end up in a product you sell. No account, no licence key, no attribution required and no personal-use restriction.
That last point is stated explicitly because it is not universal. Of the fifteen generators audited during research, one limits its free tier to personal use only.
No warranty
The site and everything on it are provided as is, without warranty of any kind, express or implied, including any implied warranty of merchantability or fitness for a particular purpose.
The engine is tested and the test results are published so that you can judge them for yourself rather than take a claim on trust. Published tests are evidence, not a guarantee. Software has bugs, browsers have bugs, and a passing test suite is a statement about what was measured, not a proof of correctness for everything that was not.
To the extent permitted by law, no liability is accepted for any loss or damage arising from use of this site or of any value generated on it.
The values are your responsibility
Once a value leaves this page it is entirely yours. Where you paste it, how you store it, who else can read it, whether it ends up in a commit or a CI log, whether you rotate it, and whether the length and alphabet you chose are adequate for the thing you are protecting are all decisions made on your side.
The entropy figures and length guidance on these pages exist to inform those decisions. They are inputs to a judgment, not the judgment itself. An entropy figure describes the value, not the system it is used in.
This is not a security review
A generator produces a value with a stated number of bits of entropy. It cannot tell you whether that secret is stored correctly, whether your key rotation actually works, whether the algorithm consuming the value is used the way its specification requires, or whether the value has already leaked somewhere you have not looked. Those are the parts that fail in practice, and none of them is visible from here.
If you are protecting something whose compromise would matter, have the system reviewed by someone who can see all of it. A correct random value is a necessary condition, not a sufficient one.
Availability
There is no guarantee of availability, uptime or continued existence. This is a static site run by one person. It may go offline, change, move, or stop being updated, with or without notice.
That risk is bounded on purpose. Nothing you generate depends on the site being up: the values are yours the moment they appear, and every page keeps working with the network disconnected once it has loaded.
The source and its licence
The generation engine is being prepared for release as a standalone package under the MIT licence. It has not been published yet. When it is, this section will link to it, and the licence text will travel with the code.
Until then, the code that runs on these pages can be read in your browser devtools, but reading it there grants no licence to redistribute it. Once published, the MIT licence will carry its own disclaimer of warranty and liability, and that disclaimer will apply to the package independently of anything written on this page.
Advertising and links to other sites
The site shows no ads today. If advertising is added, the ads are supplied by third parties such as Google. An ad appearing here is not an endorsement of the product or the advertiser, and anything you buy or sign up for through an ad is between you and that advertiser.
Pages link to specifications, package registries and other websites for reference. Those sites are not controlled from here, and no responsibility is taken for their content, availability or privacy practices.
Changes to these terms
These terms may change. Any change that affects what you are permitted to do, or what is disclaimed, gets a dated entry in the changelog rather than a silent edit.
Contact
Questions about these terms can be sent by email.