Header
Payload
Signed token
—
Ready. Click Sign token.
Security: HS-family JWTs are signed with a shared secret — anyone with the secret can also issue new tokens. Never expose HS secrets in client-side apps. For asymmetric public/private signing (RS256, ES256), a server-side signer is safer. This tool is for local testing.