How do I generate a secure API key / password locally?

Local, no third-party service needed:

Linux/macOS:

Code:

openssl rand -base64 32 openssl rand -hex 32

Windows (PowerShell):

Code:

[Convert]::ToBase64String((1..32 | % { Get-Random -Maximum 256 }))

Browser: our Password & API Key Generator on tools.php – WebCrypto, keys generated in your browser, never touch a server.

Rules I follow: 32+ bytes of entropy, scoped permissions, no key reuse across services, and everything stored in a password manager – not a spreadsheet.

How do you generate and store your API keys today?