How do I create a JWT token?

Enter your header and payload JSON, type your secret, and press Generate token. The token is signed with HS256 right in your browser.

How do I decode a JWT token?

Paste any token into the decoder. It splits the three parts and pretty-prints the header and payload for you.

Can this tool verify a signature?

Yes. Type the secret that was used to sign the token and the tool checks the signature with Web Crypto.

Is my secret sent anywhere?

No. Everything runs in your browser with JavaScript and Web Crypto, so nothing is uploaded to a server.

JWT Token Generator

Create HS256-signed JSON Web Tokens and decode any token, all in your browser. Your secret never leaves your device — signing and verification use the Web Crypto API locally.

Generate a token

Header (JSON)

Payload (JSON)

Secret key

Fill in the fields above and press Generate token.

Decode a token

JWT token

The signature is checked against the secret key entered above, if provided.

The decoded header and payload will appear here.

How to use

Edit the header and payload JSON, or use a preset payload.
Type your secret key and press Generate token, then copy the result.
To inspect any token, paste it in the decoder and press Decode token — the signature is verified against your secret.

Note

This tool signs with HMAC-SHA256 (HS256) only. Base64URL encoding follows the JWT standard, with padding removed. Web Crypto needs a secure context, so this page must be served over HTTPS or localhost. Never use tokens generated here for real production secrets — they are for testing and learning.

JWT Token Generator

Generate a token

Decode a token

How to use

Note

Related Tools

Regex Tester

JWT Decoder

Hash Generator

UUID Generator

Unix Timestamp Converter

HTML Formatter