Web App Secrets Generator
Generate a framework secret in your browser. It is never sent to our servers, never logged, and not stored anywhere.
Django's own
get_random_secret_key() uses 50 characters.
Rotate this key immediately if it has ever been committed to source control, pasted into a chat, or shared. Changing
SECRET_KEY invalidates existing sessions and password-reset links.
Reads the key from the environment — keep the literal out of your code.