Loading…
Loading…
Create signed JSON Web Tokens for testing: HS256/384/512 with a secret, or RS256, PS256, ES256, ES384, and EdDSA with a key pair generated in your browser. Adds iat and exp for you.
Also covers: JWT creator · JWT signer · Create JWT
iat and exp are added from the options above; values you type here are overridden by them.
Used as UTF-8 bytes. Anyone with the secret can create valid tokens, so keep real ones out of browsers and chat logs.
Enter a secret, or click Random secret
Choose HS256 for a shared secret or an asymmetric algorithm like RS256 or ES256. Set Expires in to add an exp claim, and keep Add iat on to record when it was issued.
Edit the JSON payload (sub, name, roles, aud…). For HMAC, type a secret or click Random secret; for the others, paste a PKCS#8 private key or click Generate key pair.
The signed token updates as you type. For asymmetric algorithms, the matching public key is shown too — give it to the API that verifies the tokens.
At least 32 bytes for HS256, 48 for HS384, and 64 for HS512 (RFC 7518), and random, not a word or phrase. Short secrets can be brute-forced offline from any token. Random secret generates one of the right length.
HS256 uses one shared secret to sign and verify, so every service that verifies can also create tokens. RS256, ES256, and EdDSA sign with a private key and verify with a public key, so only the issuer can create tokens — the usual choice when several services or third parties verify them.
They're real, standards-compliant tokens, so they'll work against your API in development and tests. For production, issue tokens from your auth server, and never paste production signing keys into a web page.
No. Keys are generated with your browser's Web Crypto API and exist only in this tab. Download or copy the ones you want to keep; they're gone when you close the page.
Data
Format, validate, and minify JSON in your browser. Paste it, upload a file, or load it from a URL. Errors show the exact line and column.
C# / .NET
Paste JSON and get C# model classes or records, ready for System.Text.Json or Newtonsoft.Json. Nested objects, arrays, nullable types, dates, and GUIDs are inferred for you.
SQL
Format and beautify SQL queries for SQL Server (T-SQL), PostgreSQL, MySQL, Oracle, and more. Set the indentation, keyword case, and layout, and get the exact line of any syntax error.
Data
Format, validate, and minify XML (config files, .csproj, SOAP, RSS) in your browser. Entities, CDATA, and mixed content are kept exactly as written, and errors show the line and column.
Data
Format and validate YAML (docker-compose, Kubernetes, GitHub Actions) without losing comments, or convert YAML to JSON. Errors show the exact line and column.
Web
Beautify HTML pages and fragments without changing how they render. Inline spacing, <pre>, and scripts stay intact, and embedded CSS and JavaScript can be formatted too.