HMAC Generator (SHA-256 / SHA-512)
Keyed message authentication codes.
About this tool
An HMAC binds a message to a secret key: anyone with the key can verify both integrity and authenticity. It is the signature scheme behind webhook verification (Stripe, GitHub), AWS request signing, and HS256 JWTs.
Enter your key as text or hex, choose a hash, and the MAC updates live. Computation uses the Web Crypto API locally.
Like everything on encrypt.tools, this runs entirely in your browser — nothing you enter is transmitted or stored.
Frequently asked questions about HMAC Generator
What is HMAC used for?+
HMAC proves a message came from someone holding a shared secret key and wasn't altered. It backs webhook signatures (Stripe, GitHub), AWS request signing, and HS256 JWTs.
How is HMAC different from a plain hash?+
A plain hash anyone can compute. HMAC mixes in a secret key, so only parties who know the key can produce or verify the code — giving authenticity, not just integrity.
Can I use a hex key?+
Yes — choose the hex key format to supply binary key material, or use text for a passphrase-style secret.
Related tools
SHA Hash Generator
Every SHA digest of your text, computed live
MD5 · 128-BITMD5 Generator
Legacy MD5 digests for checksums and lookups
CRC · 8/16/32CRC Checksum
Cyclic redundancy checks for data integrity
FILE · SHA/MD5File Checksum
Drag a file, get its hashes, compare against a published sum