Why generate JWKs in the browser?
JWT signing, OAuth private_key_jwt, and local OIDC mocks need key pairs in JWK or PEM form. Generating them locally avoids shipping private keys through a third-party API.
This generator uses WebCrypto to create RSA, EC, and OKP keys and export them for your test stack.
How to use this tool
- Choose an algorithm/curve and generate a key pair.
- Copy public and private material as JWK or PEM.
- Register the public key with your IdP or app and keep the private key local.
Frequently asked questions
Are private keys uploaded?
No. Key generation is 100% client-side with WebCrypto.