How to use HMAC Generator

What it does

Generate secure HMAC signatures using SHA-256 and a secret key. It runs entirely in your browser — your input never leaves your device.

Options

Every setting this tool exposes, straight from the code that validates it.

Worked example

Run these settings on the tool page:

• text: hello
• secretKey: example
• algorithm: SHA256

You get:

be31ce2c9ec929d1a212202123a293cab1fc604d825c167132f557f7606c32e7

Getting the result you want

Most of the control here is in the options above. If the output is not what you expected, the setting to check first is algorithm — those change the shape of the output rather than the input it accepts.

Troubleshooting

• Nothing happens / the output stays empty. text, secretKey are required — the tool waits until you provide them.
• A value is rejected. secretKey accepts at least 1 characters. Anything outside that is refused rather than silently clamped.
• It is slow on very large input. Everything runs in your browser, so speed depends on your device. Very large inputs are best split up, or run through the API where the work happens on our servers.

Automating it

The same logic is available as a REST endpoint, so you can run it from a script, a CI job or your own app.

Bash
curl "https://api.toolsxpo.com/v1/hmac-generator" \
  -H "Authorization: Bearer $TOOLSXPO_KEY"

It costs 1 credit per successful call. See the full endpoint reference, or try it in the playground.

Related tools

• AES Encryption
• Hash Verifier
• MD5 Hash Generator
• SHA-1 Hash Generator
• SHA-256 Hash Generator
• SHA-384 Hash Generator