JWK Generator & Parser

Generate JSON Web Keys (JWK) for RSA, EC (P-256/P-384/P-521/secp256k1), and OKP (Ed25519/Ed448/X25519/X448), or parse an existing JWK to inspect its parameters, thumbprint, and metadata

Key Facts

Category
Security & Validation
Input Types
select, text, checkbox, textarea
Output Type
html
Sample Coverage
4
API Ready
Yes

Overview

The JWK Generator & Parser is a utility for creating and inspecting JSON Web Keys (JWK). It supports generating keys for RSA, Elliptic Curve (EC) curves like P-256, P-384, P-521, and secp256k1, as well as Octet Key Pair (OKP) curves including Ed25519, Ed448, X25519, and X448. Additionally, it allows you to parse existing JWK strings to inspect their cryptographic parameters, key thumbprints, and metadata.

When to Use

  • •When you need to generate a new public/private key pair formatted as a JSON Web Key (JWK) for JWT signing or encryption.
  • •When you need to extract the public key component from an existing private JWK to share with external clients.
  • •When you need to parse and inspect the parameters, key ID (kid), or thumbprint of an existing JWK string.

How It Works

  • •Select the mode: choose 'Generate' to create a new key, or 'Parse' to inspect an existing JWK.
  • •For generation, select the key type (RSA, EC, or OKP), configure the key size or curve, optionally assign a custom Key ID (kid), and choose whether to export only the public key.
  • •For parsing, paste your JWK JSON string into the input area to decode its properties.
  • •View the generated or parsed JWK output, including its cryptographic parameters and metadata.

Use Cases

Generating a new Ed25519 OKP key pair for signing JSON Web Tokens (JWT) in a modern web application.
Extracting a public-only JWK from a full RSA key pair to publish on a JWKS (JSON Web Key Set) endpoint.
Debugging an invalid JWK string by parsing it to verify its structure, curve parameters, and key ID.

Examples

1. Generate an EC P-256 Key Pair for JWT Signing

Backend Developer
Background
A developer needs to configure an OAuth2 authorization server that signs tokens using Elliptic Curve cryptography.
Problem
They need a valid P-256 EC key pair formatted as a JWK with a specific Key ID.
How to Use
Set Mode to 'Generate', Key Type to 'EC', Curve to 'P-256', and enter 'auth-key-v1' in the Key ID field. Leave 'Public Only' unchecked to get both public and private parameters.
Example Config
Mode: Generate, Key Type: EC, Curve: P-256, Key ID: auth-key-v1, Public Only: false
Outcome
A JSON object containing the private and public parameters (kty, crv, x, y, d, kid) ready for use in the server configuration.

2. Parse and Inspect an Existing RSA JWK

Security Engineer
Background
An engineer is troubleshooting a token verification failure and needs to verify the parameters of a public key.
Problem
They have a raw JWK string and need to check its key type, modulus, and exponent.
How to Use
Set Mode to 'Parse' and paste the JWK JSON string into the 'JWK to Parse' text area.
Example Config
Mode: Parse, JWK to Parse: {"kty":"RSA","n":"u1W2...","e":"AQAB","kid":"key-2"}
Outcome
The tool parses the key, displaying its RSA parameters, key size, and confirming the key structure is valid.

Try with Samples

json, image
Grafana Advanced Application Samples
Comprehensive Grafana samples covering advanced dashboard design, alerting configurations, data source integrations, and plugin development
matched family json,image
json, image
PDF Samples
Generated PDF samples from tools dated 2026-02-01 to 2026-02-10
matched family json,image
json, image
SWC Rust Compiler Samples
Speedy Web Compiler (SWC) examples including configuration, plugins, and integration with modern JavaScript/TypeScript projects
matched family json,image
json, image
Vercel Deployment Samples
Vercel deployment configuration examples including vercel.json, serverless functions, and edge functions
matched family json,image
json, image

Related Hubs

Image Format Conversion and Animated Export Tools
Compare image format converters for JPG, PNG, GIF, AVIF, WebP, TIFF, ICO, base64, and animation-friendly exports in one hub.
JSON Interchange and Format Translation Tools
Compare JSON conversion tools for CSV, YAML, TOML, GraphQL, XML, Markdown, Excel, BSON, EDN, and related structured formats in one hub.
JSON Inspection, Diff, and Transformation Tools
Compare JSON formatting, diffing, path inspection, schema validation, merging, transformation, and export tools in one hub for API and data workflows.
Image Cleanup, Framing, and Batch Prep Tools
Compare image cleanup, trimming, padding, framing, batch resize/compress, watermarking, and visual polish tools in one hub for asset preparation workflows.

FAQ

What key types can I generate?

You can generate RSA, EC (P-256, P-384, P-521, secp256k1), and OKP (Ed25519, Ed448, X25519, X448) keys.

Can I generate a public-only JWK?

Yes, check the 'Public Only' option to exclude private key parameters from the generated output.

What is the 'kid' parameter?

The 'kid' (Key ID) is an optional identifier used to match a specific key in a set of JSON Web Keys.

How do I inspect an existing JWK?

Switch the mode to 'Parse', paste your JWK JSON string into the input field, and view the decoded parameters.

Are my private keys secure when using this tool?

Yes, all key generation and parsing operations run locally in your browser without transmitting key data to any server.

API Documentation

Request Endpoint

POST /en/api/tools/jwk-generator

Request Parameters

Parameter Name Type Required Description
mode select No -
keyType select No -
keySize select No -
curve select No -
keyId text No -
publicOnly checkbox No -
jwkInput textarea No -

Response Format

{
  "result": "
Processed HTML content
",
  "error": "Error message (optional)",
  "message": "Notification message (optional)",
  "metadata": {
    "key": "value"
  }
}
HTML: HTML

AI MCP Documentation

Add this tool to your MCP server configuration: 

{
  "mcpServers": {
    "elysiatools-jwk-generator": {
      "name": "jwk-generator",
      "description": "Generate JSON Web Keys (JWK) for RSA, EC (P-256/P-384/P-521/secp256k1), and OKP (Ed25519/Ed448/X25519/X448), or parse an existing JWK to inspect its parameters, thumbprint, and metadata",
      "baseUrl": "https://elysiatools.com/mcp/sse?toolId=jwk-generator",
      "command": "",
      "args": [],
      "env": {},
      "isActive": true,
      "type": "sse"
    }
  }
}

You can chain multiple tools, e.g.: `https://elysiatools.com/mcp/sse?toolId=png-to-webp,jpg-to-webp,gif-to-webp`, max 20 tools.

If you encounter any issues, please contact us at [email protected]