Configuration

Configure the basic settings for JWT generation, including your secret key and the signing algorithm to use.

Your secret key is stored locally in your browser and is never included in shareable URLs.

Current key size: {{ secret.length }}. We recommend increasing it to {{ recommendedKeyLength }} characters for {{ algorithm }} for optimal security.

The default HS256 algorithm is suitable for most use cases. Only change this if your server specifically requires a different algorithm.

Standard Claims

Define standard JWT claims that are recognized by the specification, such as expiration times, issuer, subject, and audience.

Use relative time expressions like "now", "+1h", or "+7d" from the current moment.

Specifies when this token expires and should no longer be accepted by the server.

Specifies when this token becomes valid and can start being used by the server.

Identifies who created and issued this token, typically your application's domain or identifier.

Identifies the subject of the token, usually a user ID or email address that the token represents.

Identifies the intended recipient of this token, such as your API server that should accept this JWT.

Custom Claims

Add your own custom data to the JWT payload using any key-value pairs that your application requires.

JWT Token

Your generated JWT updates automatically as you modify any values above. Copy it to your clipboard or use it directly in your application.

Full Token
{{ generatedJWT }}

{{ generatedJWT.length }} characters

Header

                        
Payload

                        
Signature
{{ jwtParts.signature }}

Enter a secret key to generate JWT

Copied to clipboard!