HMAC generator

Create HMAC signatures with SHA-1, SHA-256, SHA-384 or SHA-512. Calculated locally, your key never leaves the browser.

Runs in your browser · nothing is sentHashing & crypto

Secret keyMessageAlgorithmHMAC-SHA-256

The result appears here

About this tool

Enter a secret key and a message to get the HMAC as hex. Useful for testing webhook signatures and API authentication.

🔒 Your input stays in your browser and is never sent anywhere.

Is it safe to enter a production key?

Everything runs in your browser, but prefer test keys. Never share production secrets.

JWT decoderDecode a JSON Web Token and view the header, payload and expiry date. Local only, the token is not sent anywhere.

Found a problem or have a suggestion? Tell us