Personal project · 2026
LIVE
Token Generator
A two-page cPanel tool: a cryptographically secure random token generator plus a page on why it exists. No login, no setup, geolocation-aware usage stats.
01Why it exists
The short version: I got tired of leaving my editor.
Every time one of my projects needed a random token, whether that was an API key, a session secret, a webhook signature, or a password reset code, I would end up doing one of two things: dropping into a terminal to run some one-liner I could never quite remember the flags for, or opening a new tab and Googling "random token generator" for the hundredth time.
Neither felt right. The terminal command always needed tweaking for length or character set, and Googling it meant landing on some ad-choked site I did not trust with anything security related. It was a small annoyance, but it happened constantly, across almost every project I built.
So I built the tool I actually wanted: something fast, minimal, and mine — one that generates a secure token in one click, lets me control the length and character set, and does not try to sell me anything. This is that tool.
Every time one of my projects needed a random token, whether that was an API key, a session secret, a webhook signature, or a password reset code, I would end up doing one of two things: dropping into a terminal to run some one-liner I could never quite remember the flags for, or opening a new tab and Googling "random token generator" for the hundredth time.
Neither felt right. The terminal command always needed tweaking for length or character set, and Googling it meant landing on some ad-choked site I did not trust with anything security related. It was a small annoyance, but it happened constantly, across almost every project I built.
So I built the tool I actually wanted: something fast, minimal, and mine — one that generates a secure token in one click, lets me control the length and character set, and does not try to sell me anything. This is that tool.
02How it works
Plain PHP, no framework, no login. Tokens are generated server-side with PHP's CSPRNG, and every generation is logged (length, rough location via IP geolocation) to a local SQLite file just to keep a running usage count. Geolocation is best-effort and never blocks generation if it fails.
03What I learned
Sometimes the right scope for a tool really is two pages and no database setup. A useful reminder not to over-build something that's supposed to be disposable-simple.
Stack
PHP, SQLite