JWT Generator
Create & sign a JWT (HS256).
Runs entirely in your browser — nothing you enter is uploaded, logged, or tracked.
Build a signed JSON Web Token from scratch — edit the header and payload (claims), pick the HMAC algorithm and enter a secret, and get a ready-to-use token. Handy for testing APIs and auth flows. Signing happens with the Web Crypto API in your browser; the secret is never sent anywhere.
Frequently asked questions
Which algorithms are supported?
HMAC signing — HS256, HS384 and HS512 — via the Web Crypto API. (RS/ES private-key signing is not offered here.)
Is the token a real, valid JWT?
Yes — a correctly base64url-encoded, HMAC-signed token that verifies against the same secret (try it in the JWT verifier).
Is my secret sent anywhere?
No — signing is done entirely in your browser; the secret and claims never leave your device.