UUID Use Case
UUID Nonce
A nonce is a value used only once. A v4 UUID is a convenient, collision-free nonce for protocol handshakes and inline script allow-lists.
One-timeReplay protectionv4
Generated locally with the Web Crypto API — nothing leaves your browser.
What Is UUID Nonce?
- Protocols use a nonce so an eavesdropper cannot replay an old message — each exchange demands a fresh value.
- In Content-Security-Policy, a per-response UUID nonce lets you whitelist exactly one inline script block.
How to generate
- Generate a fresh v4 UUID for every exchange or response.
- Include it in the signed message or CSP header.
- Reject any message whose nonce was seen before.
Use Cases
- OAuth / PKCE state values.
- CSP script nonces.
- Challenge-response auth.
Code Examples
JavaScript
const nonce = crypto.randomUUID();
res.setHeader('Content-Security-Policy', `script-src 'nonce-${nonce}'`);Frequently Asked Questions
Nonce vs CSRF token?
Both are random one-time values; a nonce is the general crypto term, CSRF tokens are a specific use for form protection.
Must a nonce be a UUID?
No, but a v4 UUID is a handy, guaranteed-unique source of randomness.
Related tools
UUID v1 GeneratorUUID v3 GeneratorUUID v4 GeneratorUUID v5 GeneratorUUID v6 GeneratorUUID v7 GeneratorUUID v8 GeneratorBulk UUID GeneratorShort UUID GeneratorUUID ValidatorUUID FormatterUUID as a Primary KeyUUID Database IDUUID Foreign KeyUUID Shard KeyUUID Partition KeyUUID in a Composite KeyUUID Surrogate KeyUUID API KeyUUID Session TokenUUID Access TokenUUID Refresh TokenUUID Idempotency KeyUUID Request IDUUID Correlation IDUUID Trace IDUUID CSRF TokenUUID NonceUUID FilenameUUID Object KeyUUID S3 KeyUUID Upload IDUUID Cache KeyUUID Blob NameUUID Temp FileUUID User IDUUID Account IDUUID Customer IDUUID Device IDUUID Tenant IDUUID Client IDUUID Anonymous IDUUID Member IDUUID Message IDUUID Event IDUUID Job IDUUID Task IDUUID Queue Message IDUUID Transaction IDUUID Order IDUUID Invoice IDUUID Payment IDUUID Reset TokenUUID Verification TokenUUID Invite CodeUUID API SecretUUID Share LinkUUID Magic LinkUUID Node IDUUID Worker IDUUID Lock IDUUID Cluster IDUUID Test DataUUID Seed DataUUID FixtureUUID Mock IDUUID Placeholder IDUUID Sample ID