> For the complete documentation index, see [llms.txt](https://doc.duaer.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://doc.duaer.com/build/jwt.md).

# Sign a token with JWT in Duaer

In Duaer, JWT defaults to Operation Sign. You need a jwtAuth credential. Use JSON to Build Payload is off by default.
## Sign a JWT

1. Create a jwtAuth credential (secret or key pair and algorithm).
2. Search for JWT, connect it after the previous node, and select that credential.
3. Leave Operation on Sign.
4. With Use JSON to Build Payload off, set Payload Claims such as Audience and Expires In (default 3600 seconds).
5. Select Execute step. The signed token is on the output.

Operation can also be Decode or Verify; then set Token.

When Use JSON to Build Payload is on, use Payload Claims (JSON) instead.
## Questions

### Does JWT Decode in Duaer verify the signature?

Decode only parses the token. To check the signature and timing, use Verify with the matching credential.