All tools
Security
JWT Generator
Sign HS256/384/512 tokens, then decode and verify any JWT.
Header
{
"alg": "HS256",
"typ": "JWT"
}Payload
Signature
Encoded token
—
Signed with HS256 · 0 characters
Token
Verify signature
Header
—
Payload
—
Security notes
- Signing and verification use the Web Crypto API locally — your secret is never sent anywhere.
- A JWT payload is only Base64URL-encoded, not encrypted. Don't put sensitive data in it — use a JWE for that.
- For HS256, use a secret of at least 256 bits (the “Random” button generates one).