Generate JSON Web Keys (JWK) and JWK Sets for RSA, EC, and symmetric key types used in JOSE/JWT.
JWK Generator creates fresh key material in JSON Web Key form for RSA, elliptic-curve (EC), and symmetric (oct) keys, and can package keys in a JWK Set. The selected key family determines the required JSON members and which values are public or secret. Generation happens entirely in the browser, so key material is not uploaded. A valid JWK is not automatically safe to publish: RSA and EC private parameters must be removed from a public JWKS, while an oct JWK is itself a shared secret and has no publishable public half.
Key type controls the representation. An RSA JWK uses kty "RSA" and represents its public key with n and e; a private form also carries d and may carry additional private parameters. An EC JWK uses kty "EC", a named crv, and x and y coordinates, plus d for a private key. A symmetric JWK uses kty "oct" and stores the secret in k.
Binary integers, coordinates, and secrets are encoded as base64url strings under the JOSE specifications, not as decimal numbers, hexadecimal, or PEM text. A JWK Set is a JSON object whose keys member is an array of JWK objects. Optional metadata such as kid, use, key_ops, and alg describes identification or intended handling; it does not change the underlying key.
Only after confirming that it contains public material alone. For RSA, publish a JWK with the public n and e values and omit private parameters. For EC, publish crv, x, and y and omit d. Do not publish an oct JWK, because k is the shared secret. Keep the full private or symmetric output in protected storage.
No. A JWK is a JSON representation of one cryptographic key, while a JWK Set is a JSON container for multiple JWKs. PEM is a textual envelope commonly used for other key encodings. A JWT is a token whose signature or encryption can use a key represented as a JWK; generating a JWK does not create a token.
The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.