HS384
What this is
HS384 is HMAC-SHA-384. Rare in the wild; libraries support it because JWA lists it. Operationally treat it like HS256: shared secret, both sides can forge. Compliance checklists that require SHA-384. Prefer RS256/ES256 for public verification.
Open the decoder and paste a HS384 token. Verification stays in the browser.
FAQ
- Interoperable with HS256 secrets?
- No. The hash length is part of the algorithm. The same secret bytes produce a different tag under HS256 vs HS384.