JWT Generator
Create HS256, HS384 or HS512 signed JWTs from a JSON payload and secret, for testing APIs. Free and private: runs in your browser.
Enter the payload JSON, a line with ---, then the signing secret. iat is added automatically if missing.
Hashing runs locally in your browser. Your input never leaves this page.
Use cases
- Debug a 401 by checking a token's expiry, audience and issuer.
- Inspect the claims your identity provider actually sends.
- Create test tokens for local API development.
Frequently asked questions
Is it safe to sign real tokens here?
It runs locally, but use test secrets only. Production signing keys should never be pasted into any website.
Is the JWT Generator free?
Yes. It is free with no sign-up, and it runs entirely in your browser, so your input is never uploaded or stored.
Is hashing the same as encryption?
No. A hash is one-way: you cannot get the input back. Encryption is reversible with a key. Use slow password hashes (bcrypt, Argon2, PBKDF2) for passwords and fast hashes (SHA-256) for integrity checks.
Related tools
Checking one snippet is a start. Scan your whole repository for free with CodeInspector.