Generate RSA key pairs specifically formatted for JWT RS256 signing with PEM and JWK output.
This generator creates a matching RSA private and public key pair for JWT signatures using RS256, then presents the key material in PEM and JWK forms. The private key signs tokens, while the public key lets recipients verify those signatures. Generation and formatting happen entirely in the browser, so the keys are not uploaded. The common mistake is treating both outputs as equally shareable: the public key may be distributed to verifiers, but exposing the private key allows others to create signatures that appear to come from you.
RS256 is the JOSE name for RSASSA-PKCS1-v1_5 using SHA-256. The generated private key is the signing credential, and the mathematically related public key is the verification credential. A verifier configured for RS256 checks a token signature with the public key. It does not need, and should never receive, the private key.
PEM wraps an encoded key structure in a labeled Base64 text block. An RSA public JWK represents the verification key with kty set to RSA, plus the modulus n and exponent e as base64url values. Private JWK material, when provided, contains additional secret parameters. The formats can describe the same key pair, but their text is not interchangeable.
No. RS256 signing requires the private RSA key. The matching public key verifies the signature without revealing the signing credential. RS256 is a signature algorithm, not encryption, so neither key hides the JWT header or payload. Anyone holding the compact token can decode those sections.
Only publish the public-key form. A public RSA JWK contains the key type, modulus, and public exponent, commonly represented by kty, n, and e. A private RSA JWK includes secret parameters such as d and must not be published. Inspect the members carefully before placing a JWK in a public key set.
The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.