diff --git a/matrix-module.nix b/matrix-module.nix
index 807761b..7480d5c 100644
--- a/matrix-module.nix
+++ b/matrix-module.nix
@@ -128,7 +128,7 @@ in {
           oidc_providers = [ ];
           jwt_config = mkIf (cfg.openid.jwt-secret != null) {
             enabled = true;
-            algorithm = "HS256";
+            algorithm = "RS256";
             secret = cfg.openid.jwt-secret;
           };
           listeners = [{