Generate HMAC-SHA256/512 signatures for API authentication and webhooks.
Common Use Cases
Generate HMAC (Hash-based Message Authentication Code) signatures for any message and secret key. Supports HMAC-SHA1, HMAC-SHA256, HMAC-SHA384, and HMAC-SHA512 using the browser Web Crypto API. Output in hex or Base64. Essential for verifying Stripe and GitHub webhook signatures, signing API requests, and validating data integrity.
The HMAC Generator provides a quick, browser-based solution for producing cryptographic signatures using the Web Crypto API without requiring server-side execution. It supports standard hashing algorithms like HMAC-SHA256 and HMAC-SHA512 with hex or Base64 outputs, keeping sensitive secret keys and messages within your local environment. Being entirely free and accessible without signups makes it well-suited for everyday development and testing tasks.
Good to know: For automated CI/CD pipelines or handling extremely large datasets requiring programmatic execution, a command-line utility or dedicated backend library may be more appropriate.
Generate secure HMAC-SHA256 or HMAC-SHA512 signatures to verify webhooks and authenticate API requests.
Enter your message or payload
Paste the raw text, JSON body, or message string you need to sign into the input field.
Input your secret key
Provide the private secret key or signing secret provided by your API provider like Stripe or GitHub.
Select the hashing algorithm
Choose the required algorithm such as HMAC-SHA256, HMAC-SHA512, or HMAC-SHA1 from the available options.
Choose the output encoding format
Select either Hexadecimal or Base64 encoding to match the format required by your specific integration.
Generate and copy the signature
The tool automatically calculates the hash using the Web Crypto API; copy the resulting signature for your headers.
Estimated time: PT1M
Share this tool
Encode and decode text with ROT13, Caesar, Atbash, and Vigenère ciphers.
Check password strength: entropy, crack time, patterns, and breach check.
AES-256-GCM encrypt and decrypt text with a passphrase — runs in your browser.
Build and sign JWTs with HS256/384/512. Verify signatures. Runs in your browser.
Generate live TOTP/2FA codes from a base32 secret. Scan QR with any authenticator.
Compute SHA-1/256/384/512 of any file and verify integrity — 100% browser-based.
Convert text or Markdown to a Word .docx file with live preview, RTL, and page-setup options.
Draw a Secret Santa with exclusions and share a private reveal link for each person.
Make custom bingo cards from your own words — play, print, or share a link.
Convert images to video with the Ken Burns zoom/pan effect. Add music and export as WebM.
Load and compare multiple URLs side by side in resizable iframes.
Rank anything with quick 1-v-1 matchups → a full ordered list you can share.
Convert Markdown to a fully customized, RTL-ready PDF.
See your public IP address plus full location, ISP, ASN, timezone, coordinates, and more.