JWT key generator — RSA, EC, Ed25519, HMAC

Generate signing keys for every JOSE algorithm family in your browser: RSA (2048/3072/4096) for RS256 and PS256, EC P-256/P-384/P-521 for ES256/ES384/ES512, Ed25519 for EdDSA, secp256k1 for ES256K, and random HMAC secrets for HS256. Export as PEM, JWK, or a ready-to-serve JWKS.

Keys are generated with the Web Crypto API on your device and never transmitted anywhere. Unsure which algorithm to pick? See JWT algorithms compared, then sign a token with your new key.