JWT Encoder (Create & Sign HS256)
Create a signed JSON Web Token from a payload and secret (HS256/384/512) for testing APIs.
Tool inputs stay in your browser · optional AI search sends your query
Good to know: A JWT is a login “pass” made of header.payload.signature. The secret signs it so the server knows it was not changed. Use test secrets only; signing happens in your browser.
How to use it (step by step)
- 1Type or paste your text into the “Payload (JSON)” box. There is already an example in it so you can see how it works; press Clear to start with your own.
- 2Choose your settings: “Secret key (test only)”, “Algorithm”, “Add “issued at” (iat)”, “Expires in (exp)”.
- 3The answer appears right away in the “Signed JWT” box. No button needed.
- 4Press Copy and paste the result wherever you need it.
Words to know
- JSON
- A common text format apps use to store and send data, made of names and values in { } brackets.
- JWT
- A login “ticket” websites give you, written as three parts separated by dots.
- App signing / keystore
- Every app is signed with a private key (kept in a keystore file). Updates must be signed with the same key, so never lose it.
- HMAC / signature
- A secret code made from the message and a secret key. If the code matches, you know the message is real and was not changed.
More in Developer
GraphQL Query Formatter & PrettifierFormat and indent nested GraphQL queries, mutations, and fragments.CORS Response Header GeneratorGenerate Access-Control headers for Express, Nginx, and Apache.Android Developer Starter GuideNot sure where to start? Follow this simple setup to build and test your first Android app.Android Studio — Download & Beginner GuideThe main workspace for building, running, and fixing Android apps. Start here if you are new.ADB / Android Platform Tools — Download & GuideConnect an Android phone to your computer to test apps and check its connection status.Android Emulator — Virtual Phone SetupTest an Android app on a virtual phone on your computer, even without a physical phone.