What is the HMAC Generator?
An HMAC combines a secret key with a message to create a signature that proves the message was not changed and came from someone who knows the key. APIs (payment gateways, AWS, Shopify, Stripe, WhatsApp webhooks) use HMAC-SHA256 to sign requests and webhooks.
Enter the message and secret, choose the algorithm and output format, and compare with the signature you received to debug your integration.
How to use the HMAC Generator
- Paste the message (e.g. the raw request body).
- Enter the secret key.
- Choose the algorithm and hex or Base64.
- Compare with an expected signature if you have one.
Tip
Signatures must be calculated over the exact raw body – even an extra space or a different JSON key order changes the result.
This HMAC Generator is 100% free, needs no signup and runs privately in your browser – on phone, tablet or computer.
Last updated: · By NodifyTech