JWT Generator (HS256) — Free Online Tool

Sign a JSON Web Token with HMAC-SHA256 from your header, payload and secret — output verifiable against jwt.io.. JWT Generator (HS256) is a free online tool from the ToolsRift Developer Tools collection. It runs entirely in your browser — nothing to install, no signup, and your data never leaves your device.

Loading JWT Generator (HS256)…

How to use JWT Generator (HS256)

Edit the header and payload JSON, enter a secret, and the tool Base64URL-encodes both segments and signs them with HMAC-SHA256 to produce a complete JWT.

Frequently asked questions

What is HS256?

HMAC using SHA-256 — a symmetric signing algorithm where the same secret both signs and verifies the token.

How do I verify the generated token?

Paste the token and the same secret into jwt.io or a JWT debugger; a matching signature confirms it was signed correctly.

Should I use this for production tokens?

Use it for testing and learning. In production, generate and sign tokens server-side so the secret is never exposed to the browser.

More Developer Tools

URL Encoder / Decoder

Percent-encode or decode text for URLs using encodeURIComponent or encodeURI, in both full-string and component modes.

JSON to Query String

Convert a JSON object into a URL query string with bracket notation for nested objects and arrays, fully percent-encoded.

Duration Humanizer

Convert milliseconds or seconds into a readable duration like 1d 2h 3m 4s, and break it down across every time unit.

Compute the difference between two dates or Unix timestamps in days, hours, minutes, seconds and a humanized string.

UUID v5 Generator

Generate deterministic RFC 4122 v5 UUIDs by SHA-1 hashing a name within a namespace (DNS, URL, OID, X.500 or custom).

Compute HMAC message authentication codes with SHA-1, SHA-256, SHA-384 or SHA-512 and a secret key, in hex or base64.

← View all Developer Tools