JWT encoder
Build and sign an HS256 JWT for testing — secret stays in this tab.
Tool processing runs in your browser — your pastes/files are not uploaded to our servers for processing.Details
Quick answer
Enter JSON claims and an HMAC secret. TryDevSnip signs an HS256 JWT locally with Web Crypto. For learning and smoke tests only.
Security note. Treat production tokens carefully. Anyone who sees a valid JWT can use it until it expires. Prefer staging tokens; never put secrets in the URL.Processing stays in your browser — inputs are not uploaded to our servers for processing.
Signed JWT
Embed this tool
Paste this iframe on your site. Includes a backlink to JWT Encoder. Opens chrome-less with ?embed=1.
Frequently asked questions
How do I create a JWT?
Enter a JSON payload, a secret, and optionally set exp/iat. Click Encode to produce a signed HS256 token with Web Crypto — all in your browser.
Can I use RS256 or ES256?
Not in this tool. Asymmetric algorithms need public/private key pairs. For HS256 testing this is sufficient; for RS256 use your server or openssl.
Is my secret uploaded?
No. TryDevSnip signs the JWT locally with Web Crypto. The signing secret is not uploaded to our servers for processing — keep production secrets out of any webpage (extensions and screen sharing still apply).
Should I use this for production tokens?
No. Sign production JWTs on your server with proper key management. This tool is for learning, debugging, and quick HS256 smoke tests.