Development
JWT Secret Generator
Pick a key length from 32 to 512 bits, then generate a standard alphanumeric secret or an enhanced secret that also includes special characters. Copy the key or an environment variable line for HMAC JWT signing.
Quick start
- 1
Choose the kind
Standard uses letters and numbers. Enhanced adds special characters.
- 2
Set the length
Use the 128, 192, 256, 384, or 512 presets, or drag in steps of 32. 256 bits is the usual start.
- 3
Check the algorithm fit
The page shows whether the length meets HS256, HS384, or HS512.
- 4
Copy
Copy the secret or a JWT_SECRET line and store it outside the page.
Features
Standard and enhanced
Standard keys use letters and numbers. Enhanced keys add special characters from the same generator.
Bit length
Jump to 128, 192, 256, 384, or 512 bits, or drag the slider in steps of 32. 256 bits is the usual starting point.
HMAC fit
See whether the length meets HS256, HS384, or HS512, then copy the secret or a JWT_SECRET line.
Specifications
- Kinds
- Standard, enhanced
- Length
- 32–512 bits, step 32
- Default
- 256 bits
- Privacy
- Processed on the toolbox API
Use cases
- Create a signing key for an HMAC JWT.
- Replace a short development secret.
- Drop a key into an environment file.
Frequently asked questions
Does this sign a token?
No. It only generates the secret you will use in your own signer.
What length should I use?
256 bits covers HS256. Use 384 or 512 bits when the algorithm requires it.