API Shield JSON Web Token validation now supports symmetric keys that use the HS256 , HS384 , and HS512 algorithms. You can configure HMAC verification keys in the Cloudflare dashboard or with the Cloudflare API. Cloudflare never stores symmetric credentials in plaintext.
API Shield - Symmetric key support for JWT validation
calendar_today
August 25, 2026
domain
cloudflare