HMAC Generator

HMAC (Hash-based Message Authentication Code) is a specific type of MAC involving a cryptographic hash function and a secret key. It's used to verify both the data integrity and authenticity of a message.

Common Uses

• API request signing (AWS, Stripe, GitHub)
• Webhook payload verification
• JWT token signatures
• Secure session tokens
• Message authentication in protocols

Algorithm Recommendations

• SHA-256: Most commonly used, good balance of security and performance
• SHA-384/512: Higher security for sensitive applications
• SHA-1: Legacy only, not recommended for new implementations

Security Notes

• Never expose your secret key in client-side code
• Use cryptographically random keys of sufficient length
• This tool processes data locally in your browser