# HMAC Generator

Canonical: https://dev.eneawork.it/hmac
Language: en
Updated: 2026-11-02
Author: Enea Zani (https://eneawork.it)

Sign a message with a secret using HMAC.

## What it does

HMAC combines a secret key with a hash to authenticate a message. It is used by webhooks, signed URLs and API authentication. This tool signs text with the Web Crypto API and never sends the secret anywhere.

## How to use

1. Paste the message.
2. Enter the secret and choose an algorithm.
3. Copy the hex or Base64 signature.

## FAQ

### How is HMAC different from a hash?

A plain hash only proves integrity. HMAC also requires a secret key, so it proves the message was signed by someone who knows the key.

### Which output should I use?

Use hex for logs and documentation, Base64 for HTTP headers and compact transport.

### Is the secret stored?

No. It stays in the page memory and disappears when you close or reload the tab.

## Related tools

- [Hash Generator](https://dev.eneawork.it/hash-generator)
- [JWT Decoder](https://dev.eneawork.it/jwt)
- [TOTP Generator](https://dev.eneawork.it/totp)

## Machine-readable

- Tool catalogue: https://dev.eneawork.it/tools.json
- Full AI context: https://dev.eneawork.it/llms-full.txt
- Privacy: https://dev.eneawork.it/privacy
- This page in HTML: https://dev.eneawork.it/hmac
- Italian version: https://dev.eneawork.it/it/hmac