HMAC Generator
Keyed HMAC: SHA-256 / 384 / 512.
Runs entirely in your browser — nothing you enter is uploaded, logged, or tracked.
Compute an HMAC over a message with a secret key using SHA-256/384/512 — the standard way to authenticate a message — entirely in your browser via Web Crypto.
…Frequently asked questions
What is an HMAC used for?
An HMAC proves a message hasn’t been tampered with and came from someone who holds the shared secret key — used to sign API requests, webhooks, and tokens.
Is my secret key uploaded?
No. The key and message stay in your browser; the HMAC is computed locally with the native Web Crypto implementation and nothing is sent anywhere.