HMAC Generator
Generate HMAC keyed-hash message authentication codes with your secret key. Choose MD5, SHA-1, SHA-256 or SHA-512. Essential for API signatures, webhook verification and token authentication.
It is completely free, private and requires no signup.
You cannot recover the original input from a hash.
bcrypt or argon2 for passwords; SHA-256 for integrity.
Compare digests for integrity; prefer slow algorithms for secrets.
How it works
Generate HMAC keyed-hash message authentication codes with your secret key. Choose MD5, SHA-1, SHA-256 or SHA-512. Essential for API signatures, webhook verification and token authentication.
Type the message and your secret key.
Select the hash function and whether to output hex or base64.
Grab the result for your API request or signature.
Examples & Data
| Algorithm | HMAC (hex) |
|---|---|
| HMAC-SHA256 | f7bc83f430538424b13298e6aa6fb143ef4d59a14946175997479dbc2d1a3cd8 |
| HMAC-SHA1 | de7c9b85b8b78aa6bc8a7a36f70a90701c9db4d9 |
Example uses message "The quick brown fox" and key "key".
All tools
Ready to try it?
It is completely free, private and requires no signup.
Use the tool nowFrequently Asked Questions
Authenticating API requests, verifying webhook payloads, and creating signatures that prove a message was not tampered with.
No. HMAC combines a secret key with a hash function, so only someone with the key can reproduce the code.
The key authenticates the sender. Without it, anyone could forge a valid code for the same message.
More Free Tools
Explore the whole collection — no signup, 100% free & private.