# JWK Generator & Parser Generate JSON Web Keys (JWK) for RSA, EC (P-256/P-384/P-521/secp256k1), and OKP (Ed25519/Ed448/X25519/X448), or parse an existing JWK to inspect its parameters, thumbprint, and metadata > Canonical page: https://elysiatools.com/en/tools/jwk-generator - **Category:** Security - **Keywords:** jwk, json web key, jwt, rsa, ec, p-256, ed25519, x25519, okp, key, generate, crypto, thumbprint, kid, public key ## Overview The JWK Generator & Parser is a utility for creating and inspecting JSON Web Keys (JWK). It supports generating keys for RSA, Elliptic Curve (EC) curves like P-256, P-384, P-521, and secp256k1, as well as Octet Key Pair (OKP) curves including Ed25519, Ed448, X25519, and X448. Additionally, it allows you to parse existing JWK strings to inspect their cryptographic parameters, key thumbprints, and metadata. ## Inputs - **Mode** (select) - **Key Type** (select) - **Key Size (RSA)** (select) - **Curve (EC/OKP)** (select) - **Key ID (kid)** (text): optional, e.g. my-key-2026 - **Public Only** (checkbox) - **JWK to Parse** (textarea): {"kty":"RSA","n":"...","e":"AQAB"} ## When to use - When you need to generate a new public/private key pair formatted as a JSON Web Key (JWK) for JWT signing or encryption. - When you need to extract the public key component from an existing private JWK to share with external clients. - When you need to parse and inspect the parameters, key ID (kid), or thumbprint of an existing JWK string. ## How it works - Select the mode: choose 'Generate' to create a new key, or 'Parse' to inspect an existing JWK. - For generation, select the key type (RSA, EC, or OKP), configure the key size or curve, optionally assign a custom Key ID (kid), and choose whether to export only the public key. - For parsing, paste your JWK JSON string into the input area to decode its properties. - View the generated or parsed JWK output, including its cryptographic parameters and metadata. ## Use cases - Generating a new Ed25519 OKP key pair for signing JSON Web Tokens (JWT) in a modern web application. - Extracting a public-only JWK from a full RSA key pair to publish on a JWKS (JSON Web Key Set) endpoint. - Debugging an invalid JWK string by parsing it to verify its structure, curve parameters, and key ID. ## Frequently asked questions ### What key types can I generate? You can generate RSA, EC (P-256, P-384, P-521, secp256k1), and OKP (Ed25519, Ed448, X25519, X448) keys. ### Can I generate a public-only JWK? Yes, check the 'Public Only' option to exclude private key parameters from the generated output. ### What is the 'kid' parameter? The 'kid' (Key ID) is an optional identifier used to match a specific key in a set of JSON Web Keys. ### How do I inspect an existing JWK? Switch the mode to 'Parse', paste your JWK JSON string into the input field, and view the decoded parameters. ### Are my private keys secure when using this tool? Yes, all key generation and parsing operations run locally in your browser without transmitting key data to any server. ## Related tools - [Image Palette to Design Tokens](https://elysiatools.com/en/tools/image-to-design-tokens): Extract a dominant color palette from an image (k-means clustering), then export it as CSS variables, SCSS variables, a Tailwind config, or JSON design tokens — with named colors and an auto-generated shade scale for each - [package.json Dependency Auditor](https://elysiatools.com/en/tools/package-json-dependency-auditor): Audit a package.json for dependency hygiene, version-range quality, and optionally inspect a transitive dependency tree from package-lock.json or yarn.lock. Flags duplicates, wildcard or pre-release specs, unsorted keys, missing metadata, and misclassified runtime/dev dependencies. - [Radar Chart Generator](https://elysiatools.com/en/tools/radar-chart-generator): Generate customizable radar charts (spider charts) from data, perfect for multi-dimensional comparison and analysis - [Rose Chart Generator](https://elysiatools.com/en/tools/rose-chart): Generate beautiful Nightingale rose charts (coxcomb charts) to visualize data through both angle and area, perfect for comparative analysis and historical data presentation - [AGEX Secure Share Note](https://elysiatools.com/en/tools/agex-secure-share-note): Generate a plain-language share note for an AGEX bundle so recipients know how to decrypt and verify it safely - [Bulk Email Extractor](https://elysiatools.com/en/tools/bulk-email-extractor): Extract all email addresses from input text, articles, web source code, or mixed content. Supports deduplication and export to JSON. - [JSON Key Extractor](https://elysiatools.com/en/tools/json-key-extractor): Extract all keys from JSON objects with multiple output formats. Perfect for analyzing JSON structure, documentation generation, and understanding complex nested objects. - [JWT Inspector & Verifier](https://elysiatools.com/en/tools/jwt-inspector-verifier): Decode a JWT (header + payload) with syntax highlighting, diagnose standard claims, and verify the signature with HS*/RS*/PS*/ES*/EdDSA keys — plus a tampered-token forgery demo ## Samples - [JWT Samples](https://elysiatools.com/en/samples/jwt-samples): Comprehensive JWT examples from basic token structure to advanced security implementations - [Terraform Plan JSON Samples](https://elysiatools.com/en/samples/terraform-plan-json-samples): Sample Terraform plan JSON files exported from terraform show -json style payloads for dependency visualization and change review - [WebRTC Real-Time Communication Samples](https://elysiatools.com/en/samples/webrtc-samples): Comprehensive WebRTC samples for peer-to-peer audio/video communication, data channels, screen sharing, and signaling server implementation - [Web Data Serialization Go Samples](https://elysiatools.com/en/samples/web-serialization-go): Web Go data serialization examples including JSON encoding/decoding and XML parsing ## Related content - [Authorized JWT, OTP, TOTP, and Session Test Workflow](https://elysiatools.com/en/hubs/token-session-and-2fa-workflows): Build sanitized auth fixtures, separate token generation from decoding and verification, test OTP/TOTP timing, and audit JWT and session evidence without exposing real secrets.