Gerador de JWT
Gere JSON Web Tokens (JWT) assinados com HS256 usando a WebCrypto API, diretamente no navegador
Header
Payload
Quick-add standard claims:
Signature
Use a strong, random secret of at least 32 characters for HS256.
base64UrlEncode(header) + "." +
base64UrlEncode(payload),
your-secret-key
)
Generated Token
About JWT
- •JWTs consist of three Base64URL-encoded parts separated by dots.
- •HS256 uses a shared secret — keep it safe on your server.
- •The payload is readable by anyone — do not store passwords or PII.
- •Always set an
expclaim to limit token lifetime.
JWT Generator — Create Signed JSON Web Tokens
Generate signed JSON Web Tokens (JWT) with HS256 using the Web Crypto API, right in your browser. Choose your payload claims, set expiry, and get a signed token — no server needed.
JWT structure explained
Header
Algorithm and token type. Example: { "alg": "HS256", "typ": "JWT" }
Payload
Claims about the user or session. Standard claims: sub, iat, exp, iss. You can add custom fields.
Signature
HMAC-SHA256 of base64(header).base64(payload) signed with your secret key. Prevents tampering.
Full token
Three Base64URL-encoded parts joined by dots: header.payload.signature.
FAQ
What is a JWT?
A JSON Web Token is a compact, URL-safe token for securely transmitting claims between parties. It's widely used for authentication — the server issues a JWT on login, and the client includes it in subsequent requests.
Is JWT the same as an API key?
No. API keys are opaque random strings. JWTs are self-contained and carry verifiable claims (user ID, roles, expiry) without a database lookup on each request.
Is it safe to test JWTs in a browser tool?
Yes for testing. Never use your real production secret key in any online tool. Use a separate test key when experimenting.
Continue explorando
Outras ferramentas de Desenvolvimento que você pode gostar…
Formatador JSON
Formate, valide e minifique JSON com destaque de sintaxe e detecção de erros
Codificador/Decodificador Base64
Codifique texto ou arquivos em Base64 e decodifique strings Base64 em texto legível
Codificador/Decodificador de URL
Codifique e decodifique componentes de URL e parâmetros de query string
Gerador de UUID
Gere UUIDs aleatórios (v1, v4) ou gere múltiplos UUIDs em lote
Gerador de Hash
Gere hashes MD5, SHA-1, SHA-256, SHA-512 de texto ou arquivos
Testador de Regex
Teste expressões regulares com destaque de correspondências em tempo real
Decodificador JWT
Decodifique e inspecione JSON Web Tokens — header, payload e assinaturas
Formatador HTML
Formate e embeleze código HTML com indentação correta e destaque de sintaxe