Build and sign JWTs with HS256/384/512. Verify signatures. Runs in your browser.
Build, sign, and verify JSON Web Tokens (JWT) entirely in your browser. Choose HMAC algorithm (HS256, HS384, or HS512), set any standard or custom claims, enter a secret key, and get a signed JWT instantly. Switch to Verify mode to validate any JWT signature. Uses the Web Crypto API — your secret never leaves your device.
The JWT Builder & Signer allows developers to quickly generate, sign, and verify JSON Web Tokens directly in the browser using the Web Crypto API. Because processing happens entirely client-side, secret keys and token payloads never leave your local device, ensuring complete data privacy without requiring software installation or account registration.
Good to know: This tool is limited to HMAC algorithms (HS256, HS384, HS512); workflows requiring asymmetric algorithms like RSA or ECDSA will need a different approach.
Create, sign, and verify secure JSON Web Tokens using HMAC algorithms directly in your browser.
Select your HMAC signing algorithm
Choose between HS256, HS384, or HS512 from the algorithm dropdown menu to define the cryptographic hash function.
Configure your standard and custom claims
Enter the JSON payload including standard claims like sub or exp, or add any custom data fields required for your token.
Enter your secure secret key
Input the secret string used to sign the token; the Web Crypto API ensures this key never leaves your local device.
Generate and copy the signed JWT
The tool instantly builds and signs the token. Copy the resulting three-part encoded string for use in your application.
Verify an existing JWT signature
Switch to Verify mode and paste a token to validate that its signature matches the provided secret key.
Estimated time: PT1M
Share this tool
Generate strong, customizable secure passwords instantly.
Generate MD5, SHA-1, SHA-256, SHA-512 hashes from text.
Encode and decode text with ROT13, Caesar, Atbash, and Vigenère ciphers.
Check password strength: entropy, crack time, patterns, and breach check.
AES-256-GCM encrypt and decrypt text with a passphrase — runs in your browser.
Generate live TOTP/2FA codes from a base32 secret. Scan QR with any authenticator.
Convert text or Markdown to a Word .docx file with live preview, RTL, and page-setup options.
Draw a Secret Santa with exclusions and share a private reveal link for each person.
Make custom bingo cards from your own words — play, print, or share a link.
Convert images to video with the Ken Burns zoom/pan effect. Add music and export as WebM.
Load and compare multiple URLs side by side in resizable iframes.
Rank anything with quick 1-v-1 matchups → a full ordered list you can share.
Convert Markdown to a fully customized, RTL-ready PDF.
See your public IP address plus full location, ISP, ASN, timezone, coordinates, and more.
Claims
All signing and verification runs locally via the Web Crypto API. Your secret never leaves your browser.