HMAC Generator
Sign messages using secret keys and Hash-based Message Authentication Codes.
Algorithm:
Encoding:
Enter a secret key and a message to compute HMAC...
About HMAC
An HMAC proves that a message comes from a sender who holds the secret key, and that nobody changed the message. It combines the message and the key with a hash.
A webhook uses an HMAC. The sender puts the signature in a header. Your server computes the same HMAC over the raw body and compares the two values. Compare them with a constant-time function, never with a plain equals.
An HMAC is not encryption. It does not hide the message. Anybody can read the message; only a holder of the key can make a valid signature.