# What are JWT's signed with?

**URL:** <https://staging-discuss.dev.twitch.com/t/what-are-jwts-signed-with/15461>\
**Category:** Extensions\
**Created:** [April 24, 2018, 10:19am UTC](https://staging-discuss.dev.twitch.com/t/what-are-jwts-signed-with/15461 "2018-04-24T10:19:42Z")\
**Posts on this page:** 2\
**Page:** 2

<div class="post-metadata">

**Author:** ![bescuseme](https://d1d6mrmdu7ztse.cloudfront.net/user_avatar/staging-discuss.dev.twitch.com/bescuseme/32/4170_2.png) [@bescuseme](https://staging-discuss.dev.twitch.com/u/bescuseme)\
**Post date:** [August 8, 2018, 1:59pm UTC](https://staging-discuss.dev.twitch.com/t/what-are-jwts-signed-with/15461/21 "2018-08-08T13:59:56Z")

</div>

Great discussion! I’ll follow up with the dev team today on the proper guidance for using the non hardcoded secret in Local Mode.

---

<div class="post-metadata">

**Author:** ![bescuseme](https://d1d6mrmdu7ztse.cloudfront.net/user_avatar/staging-discuss.dev.twitch.com/bescuseme/32/4170_2.png) [@bescuseme](https://staging-discuss.dev.twitch.com/u/bescuseme)\
**Post date:** [August 10, 2018, 11:04pm UTC](https://staging-discuss.dev.twitch.com/t/what-are-jwts-signed-with/15461/22 "2018-08-10T23:04:22Z")

</div>

Ok so the recommendation is to set the environment variable `EXT_SECRET` with the secret you want to use. Or you can also specify it on Yarn Start. Just make sure it’s base 64 decodable.

Hope this helps!

[Previous page](https://staging-discuss.dev.twitch.com/t/what-are-jwts-signed-with/15461.md?page=1)