HMAC Generator
Generate HMAC-SHA-256/384/512 message authentication codes using a secret key.
HMAC-SHA-256
—
HMAC-SHA-384
—
HMAC-SHA-512
—
Related Tools
FAQ
- What is HMAC and when should I use it?
- HMAC (Hash-based Message Authentication Code) combines a cryptographic hash with a secret key. It is used to verify both data integrity and authenticity — confirming that a message has not been tampered with and that it came from someone who knows the shared key.
- How is HMAC different from a plain hash?
- A plain hash (like SHA-256) only verifies data integrity — anyone can compute it. HMAC additionally requires knowledge of a secret key, making it suitable for authentication. Without the key, an attacker cannot forge a valid HMAC.
- Is my secret key safe?
- Yes. All computation happens in your browser using the Web Crypto API. Neither the message nor the secret key is transmitted to any server.
Compute Hash-based Message Authentication Codes (HMAC) using the Web Crypto API. Combines a message with a secret key to produce a unique authentication tag — ideal for verifying both the integrity and the authenticity of data. Supports HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512. All computation is done entirely in the browser.