# Introducing JWT Signing Keys

DevFeed: [Introducing JWT Signing Keys](<https://devfeed.tech/articles/introducing-jwt-signing-keys-416.md>)

Original publisher: [Read original article](<https://supabase.com/blog/jwt-signing-keys>)

Author: Stojan Dimitrovski

Published: 2025-07-14T07:00:00Z

Content type: release

Language: en

Sources: [Supabase Blog](<https://devfeed.tech/sources/supabase-blog.md>)

Topics: [JSON Web Tokens](<https://devfeed.tech/topics/jwt.md>), [Security](<https://devfeed.tech/topics/security.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [Supabase](<https://devfeed.tech/topics/supabase.md>), [API keys](<https://devfeed.tech/topics/api-keys.md>)

Tags: [api-keys](<https://devfeed.tech/tags/api-keys.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [jwt](<https://devfeed.tech/tags/jwt.md>), [latency](<https://devfeed.tech/tags/latency.md>), [public-key](<https://devfeed.tech/tags/public-key.md>), [rotation](<https://devfeed.tech/tags/rotation.md>), [rsa](<https://devfeed.tech/tags/rsa.md>), [security](<https://devfeed.tech/tags/security.md>), [soc2](<https://devfeed.tech/tags/soc2.md>)

## AI overview

Supabase introduces asymmetric JWT signing keys for Supabase Auth, along with new API keys to support migration and improve application security. The system uses a private key for signing and a public key for local token verification, reducing dependence on the Auth server, network latency, and shared-secret management. It supports RSA and elliptic-curve signing algorithms and safer key rotation.

## Source excerpt

A new JWT signing keys system based on public key cryptography to improve your project's security and performance.