JWT Encode Online — HS256, RS256, ES256 & More
Sign compact JWTs from editable header and payload JSON. Supports none, HMAC (HS256/384/512), RSA (RS256/384/512), RSA-PSS (PS256/384/512), ECDSA (ES256/384/512), and EdDSA (Ed25519) — jwt.io-style live debugger. Pair with JWT Decode to inspect results.
How JWT encode works
Edit header, payload, and signing material — the encoded JWT updates automatically (debounced). Choose algorithm from the toolbar or edit alg in the header JSON. iat is always set to now on encode. Use the Expiration dropdown to set exp (15m, 1h, 24h) or leave None to keep or omit exp from the payload JSON. HMAC uses a secret (optional base64url). RSA, RSA-PSS, ECDSA, and EdDSA use a PEM or JWK private key. alg=none produces an unsecured token. Encoding is not verification — use jwt-decode to inspect.
Options
Examples
Basic claims
Claims
Result
Inspect after encode
Claims
Result
Related tools
Inspect tokens with jwt-decode. Review JWKS locally via inspect-jwks. Encoding here does not replace a verified auth flow.
JWT encode FAQ
Multi-algorithm (jwt.io set)
Does this verify JWTs?
No. It signs tokens locally. Use jwt-decode to inspect and verify signatures inline, or jwt-verify for JWKS and claim policies.
Which algorithms are supported?
none, HS256/384/512, RS256/384/512, PS256/384/512, ES256/384/512, and EdDSA (Ed25519 only). Remote JWKS and full exp/aud/iss validation stay on jwt-verify.
Is this a secure JWT for production?
This is a local helper for fixtures and debugging — not a claim that tokens are “secure” or production-ready auth.
Encoding
Encode or decode Base64, URL components and HTML entities — client-side only.
Explore other tool categories
Minify
Shrink code and assets for production — minify JavaScript, CSS, HTML, JSON and XML before gzip or CDN deploy.
Beautify
Make code readable with consistent indentation — beautify JavaScript, CSS, TypeScript, SCSS, LESS, Markdown, GraphQL, SQL, YAML and more in your browser.
Unminify
Expand minified or compressed code — unminify JavaScript, CSS, TypeScript, SCSS, LESS, SQL, YAML and other formats when debugging or reviewing.
Conversion
Transform data between JSON, YAML, XML and CSV locally — no server uploads.
CSS preprocessors
Compile SCSS or LESS to standard CSS in the browser — pair with beautify or minify for a full stylesheet workflow.
JSON Tools
Validate, format, diff and explore JSON payloads — complementary to minifiers and converters.
SVG Tools
Preview, optimize with SVGO, export Data URI, resize, beautify, convert to JSX and validate SVG — all in your browser.
DevOps & Infra
Terraform HCL format/validate/minify, Dockerfile format & lint, Docker Compose and .env validation.
CI/CD
GitHub Actions and GitLab CI — format YAML and check workflow/job structure in your browser.
Logs & observability
Line-oriented JSON/NDJSON and Nginx/Apache access logs — format, filter, validate, and CSV/TSV.
Kubernetes
Multi-doc manifests, structural validate, Ingress/Deployment starters, and Helm values formatting.
Networking / IP
CIDR, subnets, and IPv4/IPv6 helpers — in your browser.
Security & tokens
JWKS, X.509 certificates, and secrets scan — browser-local.
API & schemas
OpenAPI tools to format, validate, and lint your specs.
Developer utilities
Timestamps, UUID, ULID, Nanoid, cron, passwords, regex, slugify, number bases, case, text diff, and chmod — all client-side.
Text & Markdown
Count words, build Markdown TOCs, and clean line lists — all in your browser.
Serialization
Serialize and deserialize PHP data structures beside JSON workflows.