开发者工具

JWT Generator

Generate signed JSON Web Tokens (JWT) with HS256 using the WebCrypto API, right in your browser

Security notice: Never include sensitive data in a JWT payload. JWTs are base64url-encoded, not encrypted — anyone can decode them. All signing happens locally in your browser.

Header

{ "alg": "HS256", "typ": "JWT" }

Payload

Quick-add standard claims:

Signature

Use a strong, random secret of at least 32 characters for HS256.

HMACSHA256(
  base64UrlEncode(header) + "." +
  base64UrlEncode(payload),
  your-secret-key
)

Generated Token

Click "Generate JWT" to create a token

About JWT

  • JWTs consist of three Base64URL-encoded parts separated by dots.
  • HS256 uses a shared secret — keep it safe on your server.
  • The payload is readable by anyone — do not store passwords or PII.
  • Always set an exp claim to limit token lifetime.

没找到需要的?

我们根据社区反馈开发免费工具。欢迎提出能改善您工作流的工具建议!