← All tools

HMAC Generator

Compute HMAC signatures with SHA-1/256/384/512 in hex, base64, or base64url output locally.

This tool runs entirely in your browser. Your input is never uploaded.

Output encoding
This tool runs entirely in your browser. Your input is never uploaded.

HMAC Generator

HMAC turns a shared secret plus a message into a signature that proves both authenticity and integrity — the same mechanism that secures JWTs and webhooks. Enter the message and secret, pick SHA-1, SHA-256, SHA-384, or SHA-512, and receive the signature as hexadecimal, base64, or URL-safe base64url.

The computation uses the browser's native WebCrypto engine and follows RFC 2104 semantics; results match standard test vectors such as RFC 4231, so you can verify signatures produced by other tools or libraries. Everything is computed on your device, making it safe to sign payloads with real credentials.

Related tools

A growing collection of browser-only tools. Your data stays on your device whenever the browser can handle the task.