PS256
What this is
PS256 is RSASSA-PSS with SHA-256 and a salt the length of the hash. Safer padding than PKCS#1 v1.5, poorer library support. FAPI and some banks require it. Financial-grade APIs. Confirm the verifier actually implements PSS, not RS256.
Open the decoder and paste a PS256 token. Verification stays in the browser.
FAQ
- Can I verify PS256 as RS256?
- No. Different padding. A token that verifies as both is a bug.