JWT Generator

Generate signed JSON Web Tokens (HS256, HS384, HS512) for development and testing.

Publicidad / Advertisement

ℹ️ Local processing in your browser. We do not send your data to any server.

The JWT generator creates signed JSON Web Tokens with HMAC algorithms (HS256, HS384, HS512) directly in your browser. Define the header and payload in JSON, choose the algorithm and secret key, and get the complete token ready for use in APIs, authentication or testing. Also includes a decoder to inspect any JWT without validating the signature. Use it as many times as you need: it is completely free, requires no sign-up and works directly in your browser.

Frequently asked questions

¿Qué algoritmos soporta?
Actualmente HS256, HS384 y HS512 (HMAC con SHA-2, SHA-384 y SHA-512). Los algoritmos RS* y ES* requieren claves asimétricas y no están implementados en esta versión.
¿Mi clave secreta sale de mi navegador?
No. Todo el proceso de firma y decodificación ocurre localmente en tu dispositivo usando la Web Crypto API. Nada se envía a servidores.
¿Puedo decodificar un JWT sin la clave?
Sí. El botón 'Decodificar' lee el header y payload (que son Base64URL) sin validar la firma. Útil para depurar tokens.
Which algorithms are supported?
Currently HS256, HS384 and HS512 (HMAC with SHA-2, SHA-384 and SHA-512). RS* and ES* algorithms require asymmetric keys and are not implemented in this version.
Does my secret key leave my browser?
No. All signing and decoding happens locally on your device using the Web Crypto API. Nothing is sent to any server.
Can I decode a JWT without the key?
Yes. The 'Decode' button reads the header and payload (which are Base64URL) without validating the signature. Useful for debugging tokens.

More tools