Sitemap
Every public page on this site, in one place — handy for you and for search-engine crawlers.
JWT tools
Secret generators by format & length
- 32-char Base64 secret
- 64-char Base64 secret
- 128-char Base64 secret
- 256-char Base64 secret
- 512-char Base64 secret
- 32-char Hexadecimal secret
- 64-char Hexadecimal secret
- 128-char Hexadecimal secret
- 256-char Hexadecimal secret
- 512-char Hexadecimal secret
- 32-char UUID secret
- 64-char UUID secret
- 128-char UUID secret
- 256-char UUID secret
- 512-char UUID secret
- 32-char Random String secret
- 64-char Random String secret
- 128-char Random String secret
- 256-char Random String secret
- 512-char Random String secret
Developer utilities
Guides & articles
- What is a JWT?
- HS256 vs RS256
- Blog
- FAQ
- About
- Contact
- Privacy Policy
- Terms of Use
- The JWT Security Checklist (2026)
- How to Store JWTs: localStorage vs httpOnly Cookies
- Generate a Secure JWT Secret (2026)
- JWT vs Session Auth: Which to Use?
- 10 JWT Security Best Practices
- JWT vs OAuth2: What's the Difference?
- HS256 vs RS256: Which Should You Use?
- JWT Refresh Tokens Explained
- JWT Expiration and Clock Skew Explained
- JWT Registered Claims Explained
- The JWT Header Explained
- Storing JWTs: Cookies vs localStorage
- JWT Revocation Strategies That Work
- Algorithm Confusion Attacks Explained
- JWT Key Rotation with kid and JWKS
- 401 vs 403 in Token-Based Auth
- JWT Auth in Node.js/Express: Step by Step