JWT Secret Generator 🔐

Generates cryptographically-strong secrets in your browser using crypto.getRandomValues. Pick a byte length, choose hex or base64url, hit generate, and copy straight into your env.

Randomness source
Checking…

Generate

Recommended: 64 bytes (512 bits) for HMAC JWT (HS256/HS512). Larger is fine.

Output format

For most .env files, base64url is the cleanest.

Prefix

Secret length

More bytes = more entropy. Don’t be stingy with randomness.

64 bytes • 512 bits

Common picks: 32 (ok), 64 (strong), 96–128 (ultra).

Output

Entropy: —

Important: This is for HMAC JWT secrets (HS256/HS384/HS512). If you’re using RS256/ES256, you need a real keypair (private/public key), not a shared “secret.” Also: never commit secrets; use env vars. Example: JWT_SECRET="…"