Create HS256 JWTs with custom claims. Verify with JWT Decoder.
More free utilities you might find useful
Quick answers to common questions
HS256 (HMAC-SHA256) symmetric signing only.
No. Secret is used locally to sign and never sent anywhere.
Yes. Paste into JWT Decoder with the same secret.
sub, name, iat (issued at), and exp (expiry) by default.
Not in this tool. RS256 requires private key signing.
For testing and learning. Use established libraries in production apps.
Set 1–8760 hours (1 year max in UI).
Yes.
Your data is processed entirely in your browser. Nothing is sent to any server.