🚀 Big News: Socket Acquires Coana to Bring Reachability Analysis to Every Appsec Team.Learn more
Socket
Book a DemoInstallSign in
Socket

random-web-token

Package Overview
Dependencies
Maintainers
1
Versions
33
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

random-web-token

Generate customizable random strings (tokens) using secure charsets with validation – zero dependencies.

2.3.1
latest
Source
npm
Version published
Weekly downloads
54
10.2%
Maintainers
1
Weekly downloads
 
Created
Source

random-web-token

This package uses the secure Node.js crypto module.

A lightweight utility for generating customizable random strings (a.k.a. "tokens") using predefined or custom character sets. Includes simple validation to check whether a given string matches a specific character set and length.

Ideal for user-facing identifiers such as activation links, invitation links, forgot password links, or other non-sensitive unique strings.

Installation

npm install random-web-token

(Optional) TypeScript support:

npm install --save-dev @types/random-web-token

Usage

Generate a random string (synchronously)

const token = require("random-web-token");

const generated = token.genSync("extra", 50);
console.log(generated); // e.g., "fT7ZkWA4NpDqF0BjgY..."

Generate a random string (asynchronously with await)

const token = require("random-web-token");

async function generate() {
  const generated = await token.genAsync("extra", 50);
  console.log(generated); // e.g., "h8YkMRaWg5tBz4QEX..."
}

generate();

TypeScript version:

import * as token from "random-web-token";

async function generate() {
  const generated = await token.genAsync("extra", 50);
  console.log(generated);
}

generate(); // -> sHF3p8zZCTdAmJ0cyS60NK...

Character sets

Use one of the predefined sets as the first argument when generating a string:

NameCharacters Used
"normal"a–z
"normal+"A–Z
"medium"a–z, 0–9
"medium+"A–Z, 0–9
"extra"a–z, A–Z, 0–9
"onlyNumbers"0–9

Validate a string

You can validate whether a given string matches a specific character set and length:

const token = require("random-web-token");

const t = token.genSync("extra", 50);

// Valid case
console.log(token.syncValidator("extra", 50, t)); // true

// Invalid: wrong length
console.log(token.syncValidator("extra", 40, t)); // false

// Invalid: wrong character set
console.log(token.syncValidator("normal", 50, t)); // false

Allowing custom extra characters

You can optionally allow specific extra characters:

const altered = token.genSync("extra", 50) + "+!/";
console.log(token.syncValidator("extra", 53, altered, "+!/")); // true

Use custom character sets

Need a fully custom character set? Use withMyOwnCharacters():

const token = require("random-web-token");

async function customToken() {
  const t = await token.withMyOwnCharacters("abc123", 10);
  console.log(t); // e.g., "a12cb31acb"
}

customToken();

Keywords

random

FAQs

Package last updated on 23 Apr 2025

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts