Tech · Glossary
RS256
JWT signing algorithm using RSA with SHA-256 — asymmetric, so the verifier never has the signing key.
Full definition
RS256 is a JWT signing algorithm that uses RSA with SHA-256. Because it is asymmetric, the private key signs the token and the public key verifies it — the verifier never has, and never needs, the signing key. Zaffre HRM uses RS256 for both access and refresh tokens, with key rotation supported.
See also
RS256 in practice
See how Zaffre HRM implements rs256 across HR, payroll, attendance and operations.
Book a demo