Hash-based Message Authentication Code — a mechanism that combines a cryptographic hash function with a secret key to verify both data integrity and authenticity.

When should I use HMAC?

API authentication, webhook verification, message integrity checks, and any scenario where you need to verify a message hasn't been tampered with.

Which algorithm should I choose?

SHA-256 is recommended for most use cases. SHA-512 for higher security. Avoid MD5 for new implementations.

HMAC Generator

Generate HMAC signatures for message authentication. Runs in your browser. Completely private.

No sign-up Batch convert 100% free

Secret Key

Message

Algorithm

How useful is HMAC Generator?

How to Use HMAC Generator

Enter the message text

Enter the message text to authenticate

Enter your secret key

Select the hash algorithm

Select the hash algorithm (SHA-256, SHA-384, SHA-512, or MD5)

Copy the generated HMAC

Copy the generated HMAC signature

Frequently Asked Questions

Related Tools

Password Generator

Generate strong, cryptographically secure random passwords.

MD5 Hash Generator

Generate MD5 hashes from any text input.

SHA256 Hash Generator

Generate SHA-256 hashes from any text input.

UUID Generator

Generate random UUIDs (v4) for unique identifiers.

JWT Decoder

Decode and inspect JSON Web Tokens.

Bcrypt Hash Generator

Generate bcrypt password hashes for secure storage.