Produce a keyed hash (HMAC) of a message using your secret key and SHA-256 or SHA-512, via the browser's Web Crypto API. Both the message and the key stay in your browser, which makes it handy for checking webhook signatures or API auth without a round trip.
HMAC Generator runs locally using your browser's built-in cryptography, so passwords, keys and hashes are never uploaded or logged.
A hash keyed with a secret, used to verify a message's integrity and authenticity.
No. The key and message stay in your browser and are used only locally.
The key is treated as raw UTF-8 bytes.
Computed locally
Enter a message and key…