Encryption Key Generator
Generate a cryptographically random AES encryption key of 128, 192 or 256 bits in hexadecimal and base64 for symmetric encryption.
Last reviewed by the Radiatus Cloud team
Generate a random AES encryption key with a matching initialisation vector.
Need this handled by experts?
Radiatus runs VAPT, managed SOC & security engineering for regulated teams.
Generate an AES encryption key
Symmetric encryption with AES, the Advanced Encryption Standard, requires a secret key of 128, 192 or 256 bits. This generator produces a cryptographically random AES key of your chosen size, shown in both hexadecimal and base64, along with a random 128-bit initialisation vector, which most AES modes need to ensure that encrypting the same data twice produces different output. AES-256 offers the strongest key size and is the common choice for sensitive data.
The random bytes come from the browser secure random generator where available, which is essential because a predictable key undermines the entire encryption.
Keys and initialisation vectors
The strength of AES depends on the key being truly random and kept secret; the algorithm itself is public and trusted. The initialisation vector, by contrast, does not need to be secret but should be random and unique for each encryption, which prevents an attacker from spotting repeated plaintext. Reusing an IV with the same key is a classic and serious mistake, so generate a fresh IV for every message.
Store the key securely and transmit it only through protected channels, never alongside the ciphertext in the clear. The values here are generated locally and never sent anywhere. All generation happens locally in your browser.
Related tools
- Password Strength Checker — Measure password strength by entropy and pattern analysis rather than character-class rules. Checked entirely in your browser.
- Password Generator — Generate strong random passwords and passphrases in your browser using the Web Crypto API. Nothing is transmitted, logged or stored.
- Hash Generator — Generate MD5, SHA-1, SHA-256 and SHA-512 hashes in your browser. Compare checksums and verify file integrity with nothing uploaded to a server.
- Base64 Encoder/Decoder — Encode and decode Base64 in your browser, including URL-safe Base64 and UTF-8 text. Handles files and data URIs locally with nothing uploaded.
Frequently Asked Questions
Which AES key size should I use?
AES-256 is the strongest and a common default for sensitive data. AES-128 is also considered secure and slightly faster.
Why is an initialisation vector included?
Most AES modes need a random IV so that encrypting identical data produces different ciphertext, hiding patterns. It need not be secret but must be unique.
Does the key need to be random?
Yes. AES security relies on a truly random, secret key. A predictable key can be guessed, defeating the encryption entirely.
Can I reuse the IV?
No. Reusing an IV with the same key is a serious weakness. Generate a fresh, random IV for every encryption operation.
Privacy & Security
Everything runs in your browser; nothing is uploaded.
How to Use
Choose the key size and generate an AES key with a matching IV.
Disclaimer: This tool is provided "as is" without warranty of any kind. Results are for educational and utility purposes.
Related Tools
Password Strength Checker
SecurityMeasure password strength by entropy and pattern analysis rather than character-class rules. Checked entirely in your browser.
Password Generator
SecurityGenerate strong random passwords and passphrases in your browser using the Web Crypto API. Nothing is transmitted, logged or stored.
Hash Generator
SecurityGenerate MD5, SHA-1, SHA-256 and SHA-512 hashes in your browser. Compare checksums and verify file integrity with nothing uploaded to a server.