Skip to main content
ToolsBay

UUID Generator

Generate cryptographically random v4 UUIDs in bulk.

Runs entirely in your browser — nothing is uploaded

0 generated

Frequently asked questions

Are these UUIDs random enough to rely on?

Yes. They come from your browser's cryptographic random number generator, not Math.random. A v4 UUID has 122 random bits, so a collision is not a practical concern even across billions of values.

Are the UUIDs generated on a server?

No. They are generated in your browser and never transmitted. That also means nobody else — including us — has ever seen the values you just produced.

What makes a UUID "version 4"?

The version is encoded in the value itself: the 13th hex digit is always 4, and the 17th is 8, 9, a or b. Everything else is random. You can spot a v4 UUID by looking for that 4.

Should I use a UUID as a database primary key?

It depends on the database. UUIDs avoid coordination between servers, which is their main advantage. The cost is index fragmentation from random ordering — if that matters, look at UUIDv7 or ULID, which sort by creation time.

What a UUID is

A UUID is a 128-bit identifier written as 32 hexadecimal digits in five hyphen-separated groups. Version 4 is the fully random variant: six bits are fixed to record the version and variant, and the remaining 122 are random.

The point of that much randomness is that you can generate an identifier anywhere — on a phone that is currently offline, on any one of a hundred servers — without asking a central authority whether it is taken. With 122 random bits you would need to generate roughly a billion UUIDs per second for about 85 years before a collision became likely.

Randomness matters

That guarantee depends entirely on the randomness being real. A UUID built from Math.random() looks identical but is generated by a predictable algorithm — given a few outputs, the rest can be derived. This tool uses crypto.randomUUID(), backed by the operating system's entropy source. That distinction matters any time a UUID doubles as something unguessable, such as an invitation link or a password reset token.

For passwords rather than identifiers, use the secure password generator. For a deterministic fingerprint of some content, use the hash generator.

All generators