title: What should be the "Secret" in JWT?
body: <p>I am going to apply JWT into my REST API developed using Java-Jersey. I am using this library for JWT - <a href="https://github.com/auth0/java-jwt" rel="noreferrer">https://github.com/auth0/java-jwt</a></p>
  
  <p>I have few questions about the JWT - Secret</p>
  
  <ol>
  <li>Does this <code>Secret</code> has to be unique?</li>
  <li>Shall I use the hashed version of user's password for secret? (Then it is not unique anyway) This is because then when user changed his password, his token will be automatically invalid.</li>
  </ol>