HSTS Header Generator

Build an HSTS response header locally while keeping preload enrollment and deployment requirements separate from header generation.

max-age seconds

Common duration

includeSubDomains preload token

ReadyHSTS is honored from secure HTTPS responses. The preload token alone does not submit or enroll a domain in a browser preload list.

How to use this HSTS Header Generator

Generate a Strict-Transport-Security header with max-age, subdomain, and preload-token controls. Enter your values above and the result is calculated directly in your browser. No account is required.

Fast answer, clear inputs

This tool is built around one job: give the answer quickly without forcing a signup or hiding the result. Related tools are linked nearby when the next calculation or conversion is useful.