fordeer@jwt-gen:~

HS256 · RFC 7519

 _____              _
|  ___|__  _ __  __| | ___  ___ _ __
| |_ / _ \| '__|/ _` |/ _ \/ _ \ '__|
|  _| (_) | |  | (_| |  __/  __/ |
|_|  \___/|_|   \__,_|\___|\___|_|

[ok] client-side only · no data stored

[ok] Web Crypto API · HMAC-SHA256

[ok] session ready_

$ secret_key [required]

# key used to sign JWT · never share · default for local: your_secret_key

$ username [required]

# stored as sub + username in payload

$ custom_claims [optional]

# valid JSON merged into payload

$ expires_at [optional]

never expire (omit exp claim)

# token invalid after this timestamp · leave empty / never = no exp

$ cat ./token.jwt

$ man jwt-gen

security

UI runs in-browser. Secret key never leaves your machine.

crypto

Uses Web Crypto API for HMAC-SHA256 signing.

standard

RFC 7519 JWT · algorithm HS256.

compat

Works with any system that accepts standard JWT.

$ cat ./token.jwt

$ verify --token