HMAC generator. Generate HMAC-SHA256, SHA-384, and SHA-512 hashes simultaneously with custom secret key input. Uses Web Crypto API.
100% browser-based — your data never leaves your device
Generate HMAC hashes with SHA-256, SHA-384, and SHA-512 algorithms.
Type or paste the message you want to sign with HMAC.
Enter a secret key that only you and the receiver know.
Select HMAC-SHA256, HMAC-SHA384, or HMAC-SHA512.
Click any generated hash to copy it for use in your application.
Ctrl+Enter to generate hmac
Decode and inspect JWT tokens instantly.
Password GeneratorGenerate strong, secure random passwords with customizable options.
Passphrase GeneratorGenerate memorable, secure passphrases from word lists.
UUID GeneratorGenerate UUID v4 identifiers instantly.
UUID ValidatorValidate UUID strings and identify the version (v1, v2, v3, v4, v5).
Hash GeneratorGenerate SHA-1, SHA-256, SHA-384, and SHA-512 hashes from text.
JWT GeneratorGenerate signed JWT tokens for testing with custom headers and payloads.
Bcrypt Hash GeneratorGenerate bcrypt password hashes with configurable salt rounds.
API Key GeneratorGenerate cryptographically secure API keys in hex, base64, alphanumeric, and UUID formats.
HMAC GeneratorGenerate HMAC hashes with SHA-256, SHA-384, and SHA-512 algorithms.
AES EncryptEncrypt and decrypt text using AES-256-GCM with a password-based key.
HMAC Generator is a free online security tool that generate hmac hashes with sha-256, sha-384, and sha-512 algorithms. It works entirely in your browser — no downloads, no installations, and no server uploads required. security engineers, backend developers, system administrators use HMAC Generator when they need a fast, privacy-respecting way to process security data without installing additional software. It supports capabilities such as multiple algorithms, secret key, real-time. Additional features include local processing. Common use cases include verifying api request authenticity using hmac signatures in webhook integrations, generating message authentication codes for secure inter-service communication, creating signed payloads for oauth and jwt token signing contexts. All processing happens locally using modern browser APIs, which means your data never leaves your device. This makes HMAC Generator ideal for working with sensitive data, proprietary code, or any situation where privacy matters.
HMAC Generator is a free online security tool that helps you generate hmac hashes with sha-256, sha-384, and sha-512 algorithms. Key capabilities include multiple algorithms, secret key, real-time. All processing is done locally in your browser — no data is uploaded, stored, or shared with any server. There are no sign-ups, no file size limits, and no hidden charges. It is commonly used to verifying api request authenticity using hmac signatures in webhook integrations.
Type or paste the message you want to sign with HMAC.
Enter a secret key that only you and the receiver know.
Select HMAC-SHA256, HMAC-SHA384, or HMAC-SHA512.
Click any generated hash to copy it for use in your application.
| Category | Details |
|---|---|
| Input Limits | Maximum input size: Browser memory bound |
| Key sizes: 128–4096 bits (algorithm dependent) | |
| Supported Formats | Raw text, Hex, Base64, Binary, JWT / JWS / JWE |
| Browser Engine |
|
All operations run entirely in your browser using built-in Security APIs. No server uploads, no data storage, and no third-party requests.
HMAC Generator is ideal when you need to verifying api request authenticity using hmac signatures in webhook integrations without installing software or uploading data to a server. Since everything runs in your browser, there is no setup time and no risk of your data being stored on external servers. For for command-line cryptographic operations, consider using OpenSSL CLI. For for enterprise secret management, HashiCorp Vault may be a better fit. HMAC Generator fills the gap between heavyweight desktop tools and insecure online services that require uploading your data.
HMAC (Hash-based Message Authentication Code) is used to verify both the integrity and authenticity of a message using a shared secret key.
HMAC-SHA256, HMAC-SHA384, and HMAC-SHA512 are all supported. Results for all three algorithms are shown simultaneously.
HMAC combines the data with a secret key before hashing. Regular hashing (like SHA-256) produces the same hash for the same data, while HMAC requires the key to verify.
HMAC-SHA256, HMAC-SHA384, and HMAC-SHA512 all generated simultaneously.
Custom secret key input for generating unique HMAC signatures.
HMAC hashes update as you type or change the secret key.
All hashing done locally using Web Crypto API — nothing is uploaded.
HMAC Generator is useful in a variety of scenarios across different workflows:
Verifying API request authenticity using HMAC signatures in webhook integrations
Generating message authentication codes for secure inter-service communication
Creating signed payloads for OAuth and JWT token signing contexts
Store HMAC secret keys in environment variables or secure key management systems. Never commit keys to version control.
SHA-1 is deprecated for security-sensitive applications. Use HMAC-SHA256 or HMAC-SHA512 for production systems.
Explore more tools in the Security workspace:
JWT Decoder
Decode and inspect JWT tokens instantly.
Password Generator
Generate strong, secure random passwords with customizable options.
Passphrase Generator
Generate memorable, secure passphrases from word lists.
UUID Generator
Generate UUID v4 identifiers instantly.
UUID Validator
Validate UUID strings and identify the version (v1, v2, v3, v4, v5).
Hash Generator
Generate SHA-1, SHA-256, SHA-384, and SHA-512 hashes from text.