← All Tools

HMAC Generator

Compute and verify HMAC signatures using Web Crypto. Text, hex or base64 input (or a file); hex, base64 and base64url output. SHA-1, SHA-256, SHA-384, SHA-512.

🔒 100% client-side. Secret, message and files never leave your browser.

Output

Enter a secret key to compute an HMAC.

Verify

Note: SHA-1 HMAC remains widely used but is considered legacy. Prefer SHA-256 or higher for new integrations. Verification compares the decoded bytes (not the text), so a hex expectation matches a base64 output of the same MAC.