HMAC Signature

Compute an HMAC-SHA signature with a secret key, handy for API debugging

Message to sign Secret key

Algorithm Output

—

How to use

Compute an HMAC signature with a key, handy for API debugging. Steps:

Fill the message in Message and the secret in Secret key.
Pick the algorithm (SHA-256/1/512) and output format (hex or Base64).
Click Compute signature to get the result.

Tip: when matching a server signature, keep algorithm, encoding order, and the raw string (including newlines) identical, or results will differ.

FAQ

What is HMAC used for?

It verifies that a message has not been tampered with and comes from a party holding the same secret key. It is common for webhook verification (e.g. Feishu, GitHub, WeChat Pay) and API signing.