HMAC Generator

Keep the secret key private, match the exact algorithm/encoding used by the other system, and use HMAC only when a shared secret is the intended authenticity mechanism.

Hash

Output

Secret key

Message

—Key and message stay in this browser tab.

All sensitive values on this page are processed in your browser. Do not treat a browser utility as a replacement for an audited password manager, hardware security device, or application-specific security review.

HMAC Generator: Key Encoding & Digest Verification

Generate SHA-family HMACs from text or hex keys, show hex/Base64 together and compare an expected digest without sending secrets to a server.

GSC Page + Query quick win

Key encoding

Expected digest (optional)

Integrity and authenticity are different jobs

connects text/file digests, checksum verification and HMAC workflows. Hashes compare exact bytes; HMAC additionally depends on a shared secret key.

Password-storage boundary

Fast hashes such as SHA-256, SHA-1 and MD5 are not password-storage schemes. Production password storage should use a purpose-built slow password hashing/KDF design with salts and reviewed parameters; legacy algorithms remain here only for compatibility and checksum workflows.