title: Can a JWT produced with RS256 be decoded by the jwt.io website?
body: <p>recently I made my first Express server and added user authentication using jwt. Now I'm looking for a way to encrypt that jwt so that users will not be able to see the payload in the <a href="https://jwt.io" rel="nofollow noreferrer">https://jwt.io</a> website.</p>
  <p>Does anyone know if this encryption algorithm will prevent the users from seeing the payload without the public / private key?</p>