HMAC Verifier

Choose SHA-256, SHA-384, or SHA-512, enter a message and secret key, then verify an expected HMAC locally in the browser.

Verify an expected HMAC locally

Enter the same message bytes, secret key, algorithm, and output encoding used by the source system. Nothing is uploaded by this tool.

Message

Secret key

Algorithm

Expected format

Expected HMAC

ReadyComparison

—Computed HMAC

HMAC authenticates data only when the shared key remains secret and both sides use the same algorithm and exact message bytes. A matching digest does not prove who originally possessed the key.

Integrity and authenticity are different jobs

connects text/file digests, checksum verification and HMAC workflows. Hashes compare exact bytes; HMAC additionally depends on a shared secret key.

Password-storage boundary

Fast hashes such as SHA-256, SHA-1 and MD5 are not password-storage schemes. Production password storage should use a purpose-built slow password hashing/KDF design with salts and reviewed parameters; legacy algorithms remain here only for compatibility and checksum workflows.