How to use JWT Generator
- 1. Edit claims. iat and exp are seconds, not ms.
- 2. Set a secret. Never a production secret on a shared PC.
- 3. Sign. Header is { alg: HS256, typ: JWT }.
- 4. Inspect. Paste into JWT Debugger.
About this tool
Decoding a JWT is easy. Signing one locally is how you test a verifier without standing up Auth0. Only HS256 is offered — asymmetric keys stay out of this tab on purpose.
NumericDate
exp/iat/nbf are Unix seconds. JavaScript Date.now() is milliseconds; divide by 1000.
alg none
Not offered. Do not issue unsigned tokens.
Code examples
Claims
{ "sub": "user_123", "exp": 1893456000 }