Development fixtures only. Use invented claims and a throwaway key. Do not paste production signing secrets, bearer tokens, API keys, or real identity data. This tool does not validate a production token design or manage key rotation.
The signing operation runs in this browser page. Use throwaway test material only.
How it works
• JWT consists of Header, Payload, and Signature separated by dots
• Header and Payload are Base64URL encoded JSON
• Signature is HMAC using the algorithm you selected
• The encoding and HMAC operation run in this browser page
• The result is a test fixture, not a production identity credential