JWT Generator
Create a signed HS256 JWT from your own payload and secret — locally.
The JWT Generator builds a signed HS256 JSON Web Token from a payload you write and a secret you provide. Type your claims as JSON — subject, expiry, issuer, or anything your API expects — and the tool assembles the header, encodes the payload, computes the HMAC-SHA256 signature locally, and outputs the complete three-part token.
This is the fastest way to mint a test token for local development, integration tests or API debugging without standing up an identity server. The default payload includes standard iat and exp claims so your token behaves realistically out of the box — edit them freely.
Security matters: the signature is computed in your browser with Web Crypto and the secret never leaves your machine. Only use HS256 for systems that share a symmetric secret; production systems typically use RS256/ES256 with public-key verification.
How to use the JWT Generator
- Edit the payload JSON — keep valid JSON syntax.
- Set the HMAC secret your verifying server expects.
- Click 'Generate HS256 token'.
- Copy the complete token.
- Use it in Authorization headers or API tests; verify with your server.
Frequently asked questions
What does HS256 mean?
It is the JWT signing algorithm: HMAC with SHA-256, where the same secret both signs and verifies the token. HS256 is simple and fast, ideal when one trusted party holds the secret — for distributed systems prefer RS256 or ES256.
Can this generate RS256 tokens?
No — RS256 requires a private key that cannot be used safely in a browser page. This generator produces HS256 tokens with your shared secret, which covers local testing and most internal API scenarios.
Is my secret sent anywhere?
Never — signing happens entirely in your browser using the Web Crypto API. The token itself is generated locally and nothing is uploaded, so you can safely use real development secrets.
Related tools
View all developer tools →JSON Formatter & Validator
Format, minify and validate JSON instantly with clear error messages that point at the exact problem.
Dev ToolsJSON Validator
Check if your JSON is valid and find syntax errors with exact line and column.
Dev ToolsJSON Minifier
Compress JSON to its smallest valid form for storage and transport.
Dev ToolsJSON to CSV
Convert a JSON array of objects into a clean CSV file in one click.
Dev ToolsCSV to JSON
Convert CSV (from Excel or Google Sheets) into a JSON array of objects.
Dev ToolsBase64 Encoder
Encode text or files to Base64 — standard or URL-safe — in your browser.