JWT Generator

Generate HMAC-signed JSON Web Tokens for development and testing.

Token configuration

Configure the payload and signing options.

Use a JSON object. The generator automatically sets the issued-at and expiration claims.

HS256, HS384, and HS512 use a shared secret. For real applications, use a cryptographically random key. Never enter production secrets into a browser-based tool.

Generated token

Your signed JWT appears here after generation.

Your JWT will appear here.

JWTs are signed, not encrypted. Anyone holding a token can read its encoded header and payload. Do not include passwords or other sensitive information. This tool signs tokens locally and does not verify them against a real application's authorization rules.