Generate Secure HMAC Authentication Codes
Compute cryptographically verified HMAC codes using SHA-256, SHA-512, SHA-384, or SHA-1 with secret signing keys.
About This Tool
HMAC Generator & Verifier calculates Hash-based Message Authentication Codes used for API request signing, webhook authentication (GitHub, Stripe, Shopify), and tamper-proof message verification.
Key Features
Supports HMAC-SHA256, HMAC-SHA512, HMAC-SHA384, HMAC-SHA1
Hexadecimal and Base64 output encodings
Uppercase and lowercase hex options
100% client-side Web Crypto API
How to Use This Tool
- Enter the message or webhook payload in the input field.
- Provide your secret API key or signing secret.
- Select your hashing algorithm (HMAC-SHA256, HMAC-SHA512) and output encoding (Hex or Base64).
- Click 'Generate HMAC Code' and copy the resulting signature.
Why Use This Tool
- Essential for verifying and testing Webhook signatures from Stripe, GitHub, and Shopify.
- Runs 100% in your browser using the native Web Crypto API for zero latency and privacy.
- Supports uppercase and lowercase hexadecimal output.
Pro Tips
- Use HMAC-SHA256 for standard modern webhook verification (GitHub, Stripe, AWS)
- Always keep your secret key confidential
Frequently Asked Questions
What is an HMAC?
HMAC stands for Hash-based Message Authentication Code. It is a cryptographic mechanism that combines a secret key with a message to verify both data integrity and authentication.
Is my secret key sent to any server?
No. The entire HMAC signature is calculated locally in your browser using window.crypto.subtle.