Encoding & Decoding

HMAC Generator - API Signature Digests

Generate an HMAC locally from a message and key with SHA-1/256/384/512, outputting Hex and Base64. Useful for API signing and webhook verification checks.

HMACSignatureHash

Favorite this tool

No favorite storage mode has been selected.

Quick actions

Copy this tool URL or open the system share sheet on a supported device.

Use cases

  • Debug request signatures for APIs
  • Check webhook callback signatures
  • Verify message authentication logic

How to use

  1. Enter the message and secret key
  2. Choose the HMAC algorithm
  3. Copy the Hex or Base64 result

Example input and output

Message + key

Hello / secret

HMAC-SHA256 Hex

0cc692f2177b42b6e5cd82488ee6c5d526a007c571e7de1fec07c1e2b1dfa2e2

FAQ

How does HMAC differ from a plain hash?

A plain hash digests content only. HMAC also uses a key, so it checks integrity and that the signer holds the key.

Is the key uploaded?

No. Message and key are computed locally with Web Crypto. Local processing omits message, key, and signature bodies.

Tools

Related tools

Continue with another translated tool for a nearby task.

Hash Generator

Hash Generator - SHA Digests and Compare

Available

Compute SHA-1, SHA-256, SHA-384, and SHA-512 digests for text or local files, with optional HMAC mode and hash comparison. Uses Web Crypto in the browser for checksum and signing checks.

Hash SHA Digest

JWT Decoder

JWT Decoder - Inspect Header and Payload

Available

Decode a JWT locally to show Header, Payload, and Signature, with algorithm and expiry hints. Useful for auth debugging. The token is not uploaded.

JWT Decode Auth

Base64 Encode/Decode

Base64 Encoder and Decoder

Available

Encode and decode Base64 in the browser, with standard and URL-safe variants, automatic direction detection, and optional file-to-Base64 conversion. Useful for API debugging and local data prep.

Base64 Encoding Developer