JWK Thumbprint Calculator

Canonicalize the required members for RSA, EC, OKP, or oct JWKs and return the Base64URL SHA-256 thumbprint.

JWK JSON

Canonical required-member JSONSHA-256 Base64URL thumbprint

ReadyRFC 7638 thumbprints hash the required members in a defined lexicographic member order, not the original pasted JSON serialization.

JWT contents are untrusted until signature verification and application-specific claim validation succeed. These browser-local tools do not contact an issuer, fetch keys, or validate authorization policy.

RFC 7638 member-set verifier

Identify the key type, keep only required public members in lexicographic order, and independently calculate the SHA-256 Base64URL thumbprint for RSA, EC, oct and OKP keys.

—kty

—Required members

—Main-output match

Ready.