JWT Secret Configuration Guide

SigNoz uses a JWT secret key to sign and verify all user session tokens. It is critical to set this secret to ensure the security of your SigNoz instance.

No JWT secret key is specified

How to Set the JWT Secret

1. Choose a Strong Secret:
   Use a long, random string. Avoid using simple or guessable values.

2. Set the Environment Variable:
   Set the following to your environment configuration:

   SIGNOZ_TOKENIZER_JWT_SECRET=your-very-strong-random-secret
   

3. Restart SigNoz:
   After setting the variable, restart your SigNoz services to apply the change.

Best Practices

• Never share your JWT secret publicly.
• Rotate the secret periodically and update your environment configuration accordingly.
• Monitor logs for any warnings about missing or invalid JWT secrets.