ffee All tools
EN 中文 FR DE

JWT Builder

Build a JSON Web Token from your own claims, sign it with HMAC SHA-256 or leave it unsigned.

Build a JSON Web Token

Header: —
Payload: —
Signature: —
Token length: —
Status: —
The none algorithm produces an unsigned token and must never be used in production.

How to use the JWT Builder

  1. Edit the header and payload JSON to hold the claims you need.
  2. Choose HS256 and type a secret, or pick none for an unsigned token.
  3. Copy the finished token and paste it wherever you need it.

Features

Advertisement

More tools

Barcode Generator vCard Generator iCal Generator Htpasswd Generator RSA Key Generator API Key Generator License Key Generator Gitignore Generator EditorConfig Generator Dockerfile Generator SQL Table Generator Regex Generator

Frequently Asked Questions

Common questions about the free online jwt builder.

A compact token made of three base64url parts: a header, a payload of claims and a signature that proves the token was not changed.
With HS256 the header and payload are signed using HMAC SHA-256 through the Web Crypto API, and the secret never leaves your browser.
No. A token with the none algorithm has no signature at all, so anyone can change the claims. Use it only for local testing.
No. Signing happens locally with the Web Crypto API, so the secret and the claims are never sent to a server.
It is base64 with the plus sign replaced by a dash, the slash replaced by an underscore and the padding removed, so a token is safe in URLs.
No. It builds and signs tokens only. To verify a token you need the same secret on your own server.
Yes. Add an exp claim holding a Unix timestamp in seconds, and your server should reject the token after that moment.
Yes for HS256 with a long random secret. Never ship the none variant, because it carries no signature.
Yes. The builder is completely free, needs no account and works on desktop, tablet and phone.

Last updated: October 10, 2026