JWT Secret Key Generator
en
JWT Algorithms·5 min read·Updated October 18, 2026

HS384 Secret Key Requirements: Enterprise Cryptographic Specifications

HS384 utilizes HMAC with the SHA-384 cryptographic hash. SHA-384 is a truncated variant of SHA-512, providing 192 bits of security against quantum collision attacks and strict compliance with NSA Suite B / CNSA requirements.

384-Bit Secret Requirement

To satisfy RFC 7518, an HS384 secret must be at least 384 bits (48 raw bytes). In hexadecimal, this translates to 96 characters. In Base64, this translates to 64 characters.
Generate in Browser

Need a cryptographically secure JWT secret right now?

Generate 128 to 512-bit keys in Hex or Base64 using Web Crypto with zero server transmission.

Launch Generator

Frequently Asked Questions

Why choose HS384 instead of HS256?

Organizations subject to governmental or high-assurance regulatory requirements (such as FedRAMP or CNSA Suite) often mandate 384-bit cryptographic strength.

Related Technical Guides

JWT Algorithms

HS256 Secret Key Requirements: Specifications, Code Examples, and Common Traps

Learn the official RFC 7518 requirements for HS256 JWT keys. Understand key derivation, minimum byte lengths, and implementation examples.

JWT Algorithms

HS512 Secret Key Requirements: 512-Bit Military-Grade Signing Keys

Deep dive into HS512 secret requirements: 512-bit key length, 64-byte entropy, performance on 64-bit processors, and best practices.

HS384 Secret Key Requirements – 384-Bit Cryptographic Standards | JWT Secret Key Generator | JWT Secret Key Generator