HMAC-SHA256 Generator
Compute an HMAC-SHA256 — the signature used by most webhooks and APIs.
—Hex
—Base64
● 🔒 Your data is processed locally in your browser with the Web Crypto API and is never uploaded to our servers.
How it works
HMAC-SHA256 combines a secret key with SHA-256 (RFC 2104). Stripe, GitHub (“X-Hub-Signature-256: sha256=…”), Shopify, Slack and AWS Signature V4 all use it to prove a request really comes from them. To verify a webhook, compute the HMAC of the raw request body with your secret and compare it with the signature header — paste it in the verify field.