Generators

JWT signer (HMAC)

Mint test JWTs with arbitrary claims and a secret.

Install for Chrome →All features

Tools → Inspect → JWT signer · 7-day free trial · Premium $9.99 / yr

Try it now·runs locally · nothing uploaded

Payload (JSON) + secret

Signed JWT

Want this and 50 more tools at one keyboard shortcut, with collections and persistence?Install free trial →

★ Premium

Built for the things AI can’t fake

This tool runs free, right here. The extension adds three things a web widget can’t:

Start 7-day trial→

★ Flagship

Playground

↗

JS / TS scratchpad — sandboxed and instrumented.

Paste real code, hit Run. Console + network monitor + watch expressions all in one panel.

·Real ES modules · top-level await
·URL imports — esm.sh & friends
·Live fetch monitor (every call)
·Watch expressions in your scope
·10s sandbox timeout · zero CORS pain

HTTP client

↗

Postman-style request runner.

Save collections, share variables, hit any API. Includes GraphQL with introspection, OpenAPI / cURL import.

·Bearer / Basic / API-key auth
·GraphQL · introspection
·OpenAPI 3.x · cURL import
·Copy as fetch / axios / Python

Realtime (WS + SSE)

↗

Stream-protocol tester — what Postman doesn’t do well.

WebSocket + Server-Sent Events with custom auth headers, auto-reconnect, JSON pretty-print.

·wss:// + ws:// + subprotocols
·SSE via fetch — Authorization works
·Auto-reconnect with backoff
·Send composer · ⌘ + Enter

What it does

When you’re testing an authenticated endpoint, you often need a JWT with specific claims (a role, a tenant ID, an expiration). The JWT signer mints one from a JSON payload + a secret using HMAC.

Why use VibeGear's jwt signer (hmac)

✓HS256 / HS384 / HS512 (HMAC algorithms)
✓JSON payload editor with live syntax check
✓One-click copy to paste straight into the HTTP tab Authorization header

How to use it

1Tools → Inspect → JWT signer.
2Pick algorithm.
3Edit claims (sub, exp, scope, custom fields).
4Type your secret. Copy the output.

Frequently asked

RSA / EC support?

Not yet. RSA / EC requires PEM-loading + key pair management — out of scope for v1. HMAC covers the common "I just need a test token" use case.

Related tools

JWT debugger

Decode tokens, see claims, spot expired sessions.

OAuth 2.0 helper (PKCE + URLs)

Generate PKCE values, build authorize URLs, parse return URLs.

SHA-256 (and SHA-1 / 384 / 512) generator

Hash any text with SHA-1, SHA-256, SHA-384, or SHA-512.

★ Premium

One install. Every tool above.

7 days free, then VibeGear Premium is $9.99 / €9.99 per year. Everything runs locally.

Install & start trial →→