What is RS512?

RS512 combines RSA public-key cryptography with the SHA-512 hash function. The JWT header specifies "alg": "RS512".

Header Example

{ "alg": "RS512", "typ": "JWT", "kid": "key-1" }

Verification

Verify using the RSA public key from your JWKS endpoint. Our JWKS Validator supports RS512 verification.

Using RS512 Explained — RSA-SHA512 JWT Signing Safely

Algorithm RS512 Explained — RSA-SHA512 JWT Signing defines JWT signing. Validate the header alg matches expectations. Use JWKS for asymmetric keys; protect HMAC secrets.

Browse related resources: JWT Decoder, JWT Validator, JWT Basics, JWT Authentication, JWT Errors, Algorithms, Glossary, and Learning Path.

Try It Now

FAQ

Is RS512 stronger than RS256?

RS512 uses SHA-512 instead of SHA-256. Both use RSA; RS512 provides a larger hash output.

Should I use RS512?

RS256 is the industry default. Use RS512 only if your security policy requires SHA-512.