HMAC generator
Signs a message or file with a secret key: HMAC-SHA256, SHA-384, SHA-512 or SHA-1, as hex or Base64. To check a webhook signature, paste the raw request body and compare.
- In
- text · file
- Out
- HMAC
Waiting for input
Runs in this tab. The text is not sent anywhere.
Related
Questions
Is the key saved?
No. Unlike other settings, the key is never stored in the browser, and nothing leaves the tab.
Why does my signature not match the provider's?
The body must be byte for byte what was signed — a reformatted JSON or an extra newline changes the result. Some providers also sign a timestamp with the body.