MACs hash-wasm mac

HMAC Generator - Message Authentication Code

Generate HMAC signatures with any hash function - the standard for API authentication and message integrity.

hmac.workspace
2 options
0 bytes UTF-8, Hex, or Base64 input
Options
Key *

Supports UTF-8, Hex, and Base64 input.

0 bytes

Secure client-side computation. No data leaves your browser. Privacy Security

Result Output

What Is HMAC?

HMAC (Hash-based Message Authentication Code) is a standard construction for creating message authentication codes with a cryptographic hash function and a secret key, providing both data integrity and authenticity verification.

Specifications

Output Size Variable
Standard FIPS 198-1
Standard Year 2008
Origin RFC 2104 (HMAC)
Origin Year 1997

Use Cases

  • API request signing and authentication
  • JWT (JSON Web Token) signatures
  • Webhook payload verification
  • TLS/SSL session authentication
  • Software update integrity checks
!

Security Notice

HMAC is a keyed message authentication tool. Keep keys secret, use protocol-appropriate key sizes, and do not treat the output as encryption.

Related Tools

KMAC128 MACs KMAC256 MACs BLAKE3 Hashes

Utilities

File Hash Verifier Verify local files against published checksums. Hash Compare Compare expected and actual digest values. Multi Hash Generator Generate common hashes from one input.

Guides

Algorithm Comparison Guide Choose the right primitive for each task. Hash Test Vectors Compare known outputs across common algorithms.

Implementation Notes

Practical usage details for this browser-based HMAC tool.

How to Generate a HMAC authentication code

  1. Choose UTF-8, Hex, Base64 input mode.
  2. Enter the text or encoded bytes you want to process.
  3. Adjust the HMAC options if your use case requires non-default settings.
  4. Click Generate HMAC Authentication Code and copy the result.

Example Input

Sample input:

abc

Use this sample input, then copy the generated authentication code from the result panel.

When Not to Use HMAC

  • Do not use a plain hash or derivation output directly as password storage without the right password-hashing construction and parameters.
  • Do not use it as an encryption algorithm.

Recommended Alternatives

Review related tools when you need a different output size, security margin, or keyed construction.

Frequently Asked Questions