toolbin_
FR

HMAC generator (SHA-1, SHA-256, SHA-512)

Generate an HMAC (SHA-1, SHA-256, SHA-384, SHA-512) from a message and a key.

🔒 100% client-side — no data sent

Generate an HMAC from a message and a secret key, choosing the hash function (SHA-1, SHA-256, SHA-512). Useful for signing data or verifying the integrity of a payload. The computation runs in your browser, with no key transmission.

What is it for?

  • Sign a webhook payload
  • Verify the integrity of a received message
  • Test an API signature during development
  • Reproduce an HMAC expected by a third-party service

FAQ

Which hash function should I choose?

SHA-256 is the recommended default. SHA-1 is mainly for compatibility.

Difference between HMAC and a plain hash?

HMAC combines the message with a secret key, which authenticates the origin, unlike a plain hash.

Is my secret key sent?

No, the key and message stay in your browser.