urn:uuid: prefix. Values are produced by your browser's cryptographically secure random number generator and never leave your device. | Format | Example |
|---|---|
None | xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx |
Hyphens (-) | xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx |
Braces ({}) | {xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx} |
Uppercase (ABC) | XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX |
Quotes (") | "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" |
Commas (,) | xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx,
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx |
URN (urn:uuid:) | urn:uuid:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx |
Combination (Hyphens | Braces | Quotes | Commas) | {"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"},
{"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"} |
A GUID (Globally Unique Identifier) is a 128-bit value written as 32 hexadecimal digits, conventionally grouped as 8-4-4-4-12 and separated by hyphens. UUID (Universally Unique Identifier) is the same thing under a different name — Microsoft popularized "GUID", the IETF standard says "UUID", and in practice the terms are interchangeable.
The point of a GUID is that you can generate one anywhere, at any time, without asking a central authority whether it is taken. Two developers on opposite sides of the world, both offline, can each create identifiers and the values will not collide. That property is what makes GUIDs so useful in distributed systems, where a shared auto-incrementing counter would be a bottleneck or a single point of failure.
GUIDs are not guaranteed unique in a mathematical sense — they are drawn from a space so large that collisions are not a practical concern. A version 4 UUID has 122 random bits, which is about 5.3 × 10³⁶ possible values.
To put that in perspective: you would need to generate roughly 2.6 × 10¹⁸ GUIDs before the chance of a single collision reached 50%. At a billion GUIDs per second, that would take about 85 years. For any realistic application, treating them as unique is entirely safe.
This tool produces version 4 UUIDs — the random variety, and by far the most commonly used. Other versions exist: version 1 embeds a timestamp and the machine's MAC address, version 5 derives a value deterministically from a name, and version 7 (newer) is time-ordered so identifiers sort chronologically. Version 4 is the right default when you simply need an identifier with no structure and no leaked information.
Randomness comes from your browser's cryptographically secure generator, not a general-purpose one. This matters more than it sounds: a predictable generator would let someone guess identifiers they were never given, which is a genuine security problem if a GUID acts as an unguessable URL for a shared document or a password reset.
The same 128-bit value gets written differently across ecosystems, which is why the options above exist:
IN clause. urn:uuid: form defined by RFC 4122, used where a UUID must be expressed as a formal URI. GUIDs are not free. At 16 bytes they are four times the size of a 32-bit integer, and as text they occupy 36 characters. In a database, random keys scatter inserts across the index rather than appending to the end, which can hurt write performance and cache locality on large tables. They are also awkward for people — nobody reads a GUID over the phone.
Where those costs matter, common approaches are a sequential primary key paired with a GUID as the externally visible identifier, or a time-ordered UUID variant that preserves insert locality.
In practice, yes. Both describe a 128-bit identifier in the same format. "GUID" comes from Microsoft's terminology and "UUID" from the IETF specification, but a value produced by either name is interoperable.
It is theoretically possible and practically irrelevant. With 122 random bits, you would need to generate quintillions of values before a collision became likely. A faulty random number generator is a far more realistic risk than the mathematics, which is why this tool uses your browser's cryptographic generator.
Treat it as unguessable, not as a secret. A version 4 GUID is unpredictable enough to serve as an unlisted URL, but it may still be logged, cached by proxies, stored in browser history, or leaked in a referrer header. For actual authentication, use a real credential.
No. The hyphens are purely presentational. The same 128 bits with or without them represent the same identifier — though a system storing it as a string will treat the two spellings as different text, so be consistent.
No. Generation happens entirely in your browser, so the identifiers are never transmitted or recorded anywhere. Disconnect from the internet and the tool keeps working.
The website uses cookies for essential functionality. With your consent, we also use them for analytics, personalization, and personalized ads. Ads are shown either way — without consent they are non-personalized.