JWT Generator
Create and sign a JWT with HS256 and your secret. Signed in your browser with the Web Crypto API — your secret never leaves your device.
How it works
Frequently Asked Questions
HS256 (HMAC-SHA256) — the most common symmetric JWT algorithm, signed with your shared secret.
Yes — signing happens entirely in your browser with the Web Crypto API, so the secret is never sent anywhere.
Yes — add an "exp" claim (a Unix timestamp) to your payload; convert dates with the timestamp tool.
Create and sign JSON Web Tokens (JWT) online for free. Enter your claims as JSON, provide an HMAC secret, and generate a token signed with HS256 — ready for testing auth flows, APIs and integrations. Signing uses the browser’s Web Crypto API, so your secret and payload never leave your device. Pair it with the JWT decoder and validator to inspect and verify the tokens you create.