diff --git a/scripts/generate-jwt-keys.ps1 b/scripts/generate-jwt-keys.ps1
new file mode 100644
index 0000000..8b8fb6a
--- /dev/null
+++ b/scripts/generate-jwt-keys.ps1
@@ -0,0 +1,16 @@
+# Generate private key
+openssl ecparam -genkey -name prime256v1 -noout -out ec256-private.pem
+
+# Extract public key
+openssl ec -in ec256-private.pem -pubout -out ec256-public.pem
+
+Write-Host ""
+Write-Host "Private Key (DER base64):"
+openssl ec -in ec256-private.pem -outform DER | openssl base64 -A
+
+Write-Host ""
+Write-Host "--------------------------------"
+Write-Host ""
+
+Write-Host "Public Key (DER base64):"
+openssl ec -in ec256-private.pem -pubout -outform DER | openssl base64 -A