HMAC generator (SHA-1, SHA-256, SHA-512)
Generate an HMAC (SHA-1, SHA-256, SHA-384, SHA-512) from a message and a key.
🔒 100% client-side — no data sent
Generate an HMAC from a message and a secret key, choosing the hash function (SHA-1, SHA-256, SHA-512). Useful for signing data or verifying the integrity of a payload. The computation runs in your browser, with no key transmission.
What is it for?
- ▸ Sign a webhook payload
- ▸ Verify the integrity of a received message
- ▸ Test an API signature during development
- ▸ Reproduce an HMAC expected by a third-party service
FAQ
Which hash function should I choose?
SHA-256 is the recommended default. SHA-1 is mainly for compatibility.
Difference between HMAC and a plain hash?
HMAC combines the message with a secret key, which authenticates the origin, unlike a plain hash.
Is my secret key sent?
No, the key and message stay in your browser.
Related tools
AES · encrypt / decrypt Encrypt and decrypt text with AES-GCM using a password, in your browser. API key · generator Generate API keys with a custom prefix (sk_live_, pk_…), cryptographically secure. Bcrypt hash Generate a bcrypt hash of a password and verify a password against a hash, in your browser. Binary calculator (bitwise) Perform bitwise operations (AND, OR, XOR, NOT, shifts) on two numbers, in your browser. Classic ciphers (Caesar, ROT13, Vigenère) Encrypt and decrypt with the Caesar, ROT13 and Vigenère ciphers (educational). CRC32 · checksum Compute the CRC32 checksum of a text (hexadecimal).