JWT Secret Key Generator – DecodeTool.com

JWT Secret Key Generator

Generate cryptographically secure secret keys for JWT signing

Generated Secret Key
Entropy
Bits of entropy: —
bytes

💡 Best practices: Use at least 32 bytes (256 bits) of entropy for HS256. For HS384 use 48 bytes, and HS512 use 64 bytes. Store your secret securely — never commit it to version control.

🔒 Generated locally — all keys are created in your browser using window.crypto.getRandomValues(). Nothing is sent to any server.

Generate cryptographically secure JWT secret keys directly in your browser. Use varying lengths and formats to ensure your keys meet security standards.d

Generator Features & Interaction

You can customize the secret key using the options below the display. Here’s how each part works:

  • Key Display & Actions: The generated key appears in a prominent box. Use the Copy button to save it, or Regenerate to create a new key instantly.
  • Customization Options: Choose the output Format (Hex, Base64, or Base64URL) and adjust the Length in bytes. The tool automatically updates the key when you change these settings.
  • Entropy Feedback: The entropy bar and label provide real-time feedback on the key’s strength. A detail line shows the exact bits of entropy and recommends minimums for different JWT algorithms (HS256, HS384, HS512).
  • Best Practices: The info box explains recommended byte lengths for different JWT signing algorithms, helping users generate appropriately strong keys.
decodetool
Scroll to Top