Cryptographically Secure Random String Generator

Choose this endpoint when you need cryptographically secure randomness (not just pseudo-random), especially for security-sensitive use cases like tokens, session IDs, nonces, or passwords. Prefer this over client-side Math.random() or non-cryptographic generators when security guarantees matter. The custom alphabet parameter makes it particularly useful when character set constraints are required (e.g. URL-safe, hex-only, alphanumeric-only).

• Invalid or missing length parameter — returns an error if length is not a valid number
• Alphabet too short or empty — may return an error or fall back to a default character set
• Very large length values may be rejected or result in timeout
• Malformed request body — returns a 400-level error