Generate cryptographically random one-time pads and encrypt messages with provably unbreakable XOR encryption.
One-Time Pad Generator pairs a message with a cryptographically random pad and applies byte-for-byte XOR to produce ciphertext. XORing that ciphertext with the identical pad restores the original bytes. Perfect secrecy applies only when the pad is unpredictable, at least as long as the message, kept secret, and never reused. The common surprise is that the pad is as large as the protected message and must reach the recipient securely. Because messages and pads are sensitive, this browser-only tool processes them locally and uploads neither value.
At each position, XOR combines one message bit with the corresponding pad bit. Applying the same operation again reverses it: (message XOR pad) XOR pad equals message. No separate decryption transformation is needed. Every encrypted message bit must have a matching pad bit, so a proper one-time pad cannot be shorter than the message it protects.
Perfect secrecy does not come from XOR alone. It requires pad material selected uniformly at random, independent of the message, used for exactly one encryption, and known only to authorized parties. The generated pad is not a password or reusable key. Anyone who obtains it can decrypt the associated ciphertext, while a lost pad cannot be recreated from the ciphertext.
No. Reuse turns the construction into a vulnerable reused keystream. For ciphertexts C1 = P1 XOR K and C2 = P2 XOR K, XORing C1 with C2 produces P1 XOR P2. The pad disappears from that relationship, and recognizable language or known message fragments can expose the plaintexts. Generate wholly independent pad material for every message.
The ciphertext may travel over an exposed channel, but the pad must reach the recipient through a channel or prior exchange that protects it from disclosure and alteration. The recipient XORs the ciphertext with the exact same pad to recover the message. The tool does not solve pad distribution: interception destroys secrecy, and losing the pad prevents unique recovery.
The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.