Free Online JWT Generator tool icon
Crypto & security tools

Free Online JWT Generator

Free online JWT generator: edit header/payload, choose HS256/HS384/HS512 or none, and generate signed tokens locally in your browser via Web Crypto without uploading any secrets.

Header JSON
Note: alg in the header will be forced to the selected algorithm when generating.
Payload JSON
Secret
Notes: this tool uses Web Crypto locally in your browser to compute the HMAC and never uploads secrets or payloads.
Result
Compatibility: HS* uses HMAC with SHA-256/384/512. For RS256/ES256 and other asymmetric algorithms, you can use the RSA key generator tool and future extensions.

How to Use

1. Select Algorithm: Choose a signing algorithm (e.g., HS256, HS512) from the toolbar. 2. Set Secret: Choose the secret format (Text/Base64/Hex) and enter your secret key. 3. Edit Content: Modify the JSON data in the Header and Payload boxes. Use "Format" buttons to prettify JSON. 4. Generate Token: Click "Generate JWT" to calculate the signature and create the token. 5. Copy Result: Click "Copy JWT" above the result box to copy the token to your clipboard.

Tips & FAQ

Local & Secure All signature calculations are performed locally in your browser via the Web Crypto API. Your secrets and tokens are never uploaded to any server.

Algorithm Support Currently supports symmetric algorithms (HS256/HS384/HS512). For asymmetric algorithms (RS256, etc.), please stay tuned for updates.

Expiration Shortcut Click the "iat/exp(+1h)" button to quickly add the current time (iat) and an expiration time of one hour later (exp) to the Payload.

File Encryption

File Encryption

Encrypt or decrypt files locally with AES-256-GCM and download either the JSON payload or the restored file, all in the browser.

PEM/JWK Converter

PEM/JWK Converter

Convert PEM/DER/JWK/JWKS locally, export JWK/JWKS and PEM/DER, and inspect key details.

ZIP Encryptor

ZIP Encryptor

Free online ZIP Encryptor. Pack files into ZIP and encrypt with AES-256-GCM locally.

AES-256

AES-256

Lightweight, privacy-first online tools that run entirely in your browser. AES encryption and word counter are available now, more utilities coming soon.

RSA key generator

RSA key generator

Generate RSA-OAEP key pairs locally in your browser and export PEM public/private keys for testing and development.

Salt generator

Salt generator

Generate cryptographically secure random salt values locally in your browser with configurable length and Hex/Base64/Base64URL output formats, ideal for password hashing and token signing.

Password strength checker

Password strength checker

Evaluate password length, character types, diversity and common patterns, and combine this with database breach checks via k-anonymity so only hash prefixes are sent and your plain password stays on your device.

API key generator

API key generator

Securely generate various types of API keys with custom formats and batch generation, all locally in your browser.

Random number generator

Random number generator

Configure minimum/maximum range, count, uniqueness and output format to generate random integers using crypto.getRandomValues locally in your browser for draws, test data and simulations.

JWT token decoder

JWT token decoder

Free online JWT token decoder: decode header and payload, inspect signature segment format, and interpret common claims such as exp/nbf/iat, all locally in your browser with no token data uploaded.

HMAC generator

HMAC generator

Generate HMAC values locally in your browser using SHA-1 / SHA-256 / SHA-512 with text or hex keys, and view Hex and Base64 outputs without uploading any data.

Hash generator and checker

Hash generator and checker

Compute MD5 / SHA-1 / SHA-256 / SHA-512 hashes for text or files locally in your browser and optionally compare them with an expected value.

Base64 encoder / decoder

Base64 encoder / decoder

Encode or decode UTF-8 text to and from Base64, including URL-safe mode, with all processing done locally in your browser.

CSR generator

CSR generator

Generate Apple Developer certificate CSRs and RSA key pairs locally in your browser.

DES

DES

Legacy-compatible DES encrypt/decrypt tool with CBC/ECB modes and local-only processing.

Password Hash

Password Hash

Generate or verify bcrypt/argon2id password hashes locally in your browser with no uploads.