JWTs are compact URL-safe strings used in Authorization headers, callbacks and test fixtures. This tool follows the JWS compact form: base64url header, base64url payload and a signature segment separated by dots. Use it as a development helper, not as production key management.
무료 JWT 생성기
브라우저에서 바로 실행됩니다. 업로드도, 회원가입도 없습니다.
Use this for local testing. Do not paste production secrets into tools you do not control.
Generated token
Edit the header and payload to generate a token
JWT 생성기는 무엇을 하나요?
JWT 생성기는 헤더, 페이로드 클레임, 서명 선택으로 간결한 JSON Web Token을 만듭니다. 이 도구는 브라우저 Web Crypto로 HS256 토큰을 만들거나 디버그용 미서명 토큰을 생성하며 JSON과 secret을 서버로 보내지 않습니다.
사용 방법
- 1Edit the header. Keep typ as JWT and choose HS256 or none.
- 2Add payload claims. Write a JSON object with sub, iat, exp or custom claims.
- 3Enter a 시크릿 키. For HS256, use only throwaway development values.
- 4Copy the token. Copy the generated compact JWT from the output box.
이런 분께 추천
- API testing with a local HS256 bearer token.
- Claim debugging for iat, exp, sub and custom fields.
- Webhook sandboxing when an endpoint expects a JWT-shaped value.
- Documentation examples with non-sensitive sample claims.
자주 묻는 질문
Is JWT 생성기 free?
Yes. You can use this JWT generator without sign-up, account or usage limit.
Are my claims or secrets uploaded?
No. The JSON and HS256 secret are processed in the browser. For real systems, keep production signing keys in your own server or key-management environment.
Can I use this for production authentication?
Use it for local testing and examples. Production authentication also needs issuer checks, audience checks, expiry validation, replay controls, key rotation and secure storage.
Which algorithms are supported?
This version supports HS256 and the none algorithm for unsigned debugging tokens. It does not sign RS256, ES256 or private-key JWTs.
What is the none algorithm?
The none algorithm creates an unsigned JWT with an empty signature segment. It is useful only for debugging when a test system explicitly accepts it.
Why does the header alg change?
The selected algorithm button controls the real output, so the generator rewrites alg to HS256 or none to match the token it creates.