Compute HMAC digests (SHA-1/256/384/512) for a message and shared secret — hex and base64.
- Free
- No signup
- Fast
- Privacy-friendly
Free · API · MCPToolYour platform
Use HMAC Generator three ways
The free HMAC Generator on this page works in your browser. The same workflow is available via REST API for apps and via MCP for Cursor, Claude, and other agents — one API key, one plan, one quota. This tool is part of the security-apis module under Security Tools.
- Free in browserUse HMAC Generator here — no account required.
- REST APICall from your server with
X-Api-Key. - MCP for agentsConnect Cursor or Claude to ToolYour MCP with the same key.
- 1. Get an API keySign in and open Dashboard → API Keys (works for REST and MCP).
- 2. Call or connectUse the REST API from your server, or paste the MCP URL into your agent config.
- 3. Same qualityOutput matches the free web tool across all three surfaces.
What is HMAC Generator?
Generate HMAC-SHA digests for webhook and API signing tests. Do not paste production secrets into public forms when avoidable. REST/MCP: /api/v1/security-apis/hmac-generator.
What are common questions about HMAC Generator?
What does HMAC Generator do?
Compute HMAC digests (SHA-1/256/384/512) for a message and shared secret — hex and base64.
Is this available via API and MCP?
Yes. Same route under /api/v1/security-apis/{slug} with one ToolYour API key and shared credits.
What are the key features of HMAC Generator?
Browser + API
Run in the browser or via REST/MCP.
Structured report
JSON-friendly output for agents and dashboards.
How do you use HMAC Generator?
Open the tool
Use the Security Tools category page.
Provide input
URL, domain, or pasted text as required.
Review findings
Fix high-severity items first.
Where do you browse more security tools tools?
- Security Tools tools
Browse the full Security Tools category on ToolYour.
- AI Tools tools
PII scrub, resume match, transcription, video summarize, and YouTube analysis. Free in the browser; API-backed
- File Converter tools
Convert PDF↔Word, compress images, and change formats online. Free in browser · REST · MCP. No signup for typi
Related tools
security tools
Subresource Integrity Checker
Parse a page for script/link tags and report missing integrity attributes on third-party assets.
Freesecurity tools
Security.txt Checker
Discover and parse RFC 9116 security.txt (/.well-known/security.txt) including Contact and Expires.
Freesecurity tools
Bcrypt Hash Generator
Generate a bcrypt password hash with configurable cost factor for local auth testing.
Freesecurity tools
DNS Lookup
Resolve A, AAAA, MX, TXT, NS, and CNAME records for a domain from the API host.
Freesecurity tools
HTTP Security Redirect Checker
Inspect redirect hop hygiene: HTTP→HTTPS upgrade, loops, long chains, and open-redirect-looking query params.
Freesecurity tools
CORS Policy Checker
Fetch a URL with a probe Origin and report Access-Control-Allow-* gaps, wildcards, and Origin reflection.
Freesecurity tools
Secret Leak Scanner
Heuristic scan of pasted env/config/log text for API keys, tokens, PEM keys, and JWTs — not a breach database.
Freesecurity tools
SPF / DKIM / DMARC Checker
Look up SPF, common DKIM selectors, and DMARC TXT records for a domain or URL hostname.
Freesecurity tools
Hash Generator
Compute MD5, SHA-1, SHA-256/384/512, or SHA-3 digests of text in one place — with legacy warnings for MD5/SHA-1.
Freesecurity tools
Secure Password Generator
Generate a cryptographically random password with configurable length and character sets.
Freesecurity tools
Password Strength Checker
Estimate password strength from length, charset mix, entropy heuristics, and a short common-password list.
Freesecurity tools
JWT Decoder
Decode JWT header and payload with weak-algorithm and expiry warnings — signature is not verified.
Free
Popular in Security Tools
security tools
Subresource Integrity Checker
Parse a page for script/link tags and report missing integrity attributes on third-party assets.
Freesecurity tools
Security.txt Checker
Discover and parse RFC 9116 security.txt (/.well-known/security.txt) including Contact and Expires.
Freesecurity tools
Bcrypt Hash Generator
Generate a bcrypt password hash with configurable cost factor for local auth testing.
Freesecurity tools
DNS Lookup
Resolve A, AAAA, MX, TXT, NS, and CNAME records for a domain from the API host.
Freesecurity tools
HTTP Security Redirect Checker
Inspect redirect hop hygiene: HTTP→HTTPS upgrade, loops, long chains, and open-redirect-looking query params.
Freesecurity tools
CORS Policy Checker
Fetch a URL with a probe Origin and report Access-Control-Allow-* gaps, wildcards, and Origin reflection.
Freesecurity tools
Secret Leak Scanner
Heuristic scan of pasted env/config/log text for API keys, tokens, PEM keys, and JWTs — not a breach database.
Free