HMAC Generator
Local processingInput
Message
Secret Key
HMAC Result
Click “Generate HMAC” to create a signature
About HMAC
HMAC combines a secret key and a hash function to authenticate a message. A plain hash alone does not authenticate its sender.
Use HMAC for API request signing and webhook checks when both parties share a secret key.
Algorithm Comparison
HMAC-SHA1160-bit outputLegacy, not recommended for security
HMAC-SHA256256-bit outputMost commonly used, good security
HMAC-SHA384384-bit outputHigher security, truncated SHA-512
HMAC-SHA512512-bit outputHighest security, best for sensitive data
Common Use Cases
- API authentication signatures
- Webhook payload verification
- Session token validation
- Data integrity checks
- OAuth 1.0 signatures