Enter your message and secret key, choose a hash algorithm and output format, and the tool computes the HMAC using the Web Crypto API for you to copy.
A keyed hash that proves both the integrity and authenticity of a message — only someone with the secret key can produce a matching code.
A plain hash uses no key, so anyone can recompute it. HMAC mixes in a secret key so the code cannot be forged without it.
SHA-256 is a strong default; use SHA-384 or SHA-512 for extra margin. Avoid SHA-1 for new security-sensitive uses.