How to generate a SESSION_SECRET in Node.js
Step-by-step Node.js guide to generate a SESSION_SECRET. Use the browser tool for quick testing, then integrate the snippet into your application.
Last updated August 26, 2026
Steps
- 1
Open the session secret generator tool and generate your value in the browser.
- 2
Copy the output — nothing is sent to a server; all processing is client-side.
- 3
Store secrets in environment variables or a secrets manager, never in source code.
- 4
Integrate the Node.js snippet below into your application.
- 5
Test end-to-end before deploying to production.
Code Example
const crypto = require('crypto');
const sessionSecret = crypto.randomBytes(32).toString('base64url');
console.log('SESSION_SECRET=' + sessionSecret);Frequently Asked Questions
Is it safe to use the browser tool to generate a SESSION_SECRET?
Yes. All computation uses Web Crypto in your browser. No keys or tokens are transmitted to any server.
Can I use this Node.js code in production?
Yes, with proper secret storage. Replace placeholder values with environment variables and follow security best practices.
Continue
Related tools and reading on JWTSecrets.