JWT Algorithms·5 min read·2026-02-05T09:00:00Z

HS384 Secret Key Requirements: Enterprise Cryptographic Specifications

HS384 utilizes HMAC with the SHA-384 cryptographic hash. SHA-384 is a truncated variant of SHA-512, providing 192 bits of security against quantum collision attacks and strict compliance with NSA Suite B / CNSA requirements.

384-Bit Secret Requirement

To satisfy RFC 7518, an HS384 secret must be at least 384 bits (48 raw bytes). In hexadecimal, this translates to 96 characters. In Base64, this translates to 64 characters.

Frequently Asked Questions

Why choose HS384 instead of HS256?

Organizations subject to governmental or high-assurance regulatory requirements (such as FedRAMP or CNSA Suite) often mandate 384-bit cryptographic strength.

HS384 Secret Key Requirements – 384-Bit Cryptographic Standards | Générateur de Clé Secrète JWT | JWT Secret Key Generator