Công cụ Developer

JWT Generator

Generate signed JSON Web Tokens (JWT) with HS256 using the WebCrypto API, right in your browser

Security notice: Never include sensitive data in a JWT payload. JWTs are base64url-encoded, not encrypted — anyone can decode them. All signing happens locally in your browser.

Header

{ "alg": "HS256", "typ": "JWT" }

Payload

Quick-add standard claims:

Signature

Use a strong, random secret of at least 32 characters for HS256.

HMACSHA256(
  base64UrlEncode(header) + "." +
  base64UrlEncode(payload),
  your-secret-key
)

Generated Token

Click "Generate JWT" to create a token

About JWT

  • JWTs consist of three Base64URL-encoded parts separated by dots.
  • HS256 uses a shared secret — keep it safe on your server.
  • The payload is readable by anyone — do not store passwords or PII.
  • Always set an exp claim to limit token lifetime.

Chưa thấy công cụ bạn cần?

Chúng tôi xây công cụ miễn phí dựa trên phản hồi cộng đồng. Hãy đề xuất tiện ích giúp workflow của bạn!