Tink, the Tinkkit robotTinkkit
← All toolsSecurity›Encryption & Keys

HMAC Generator

Create HMAC signatures with SHA-256, SHA-1, SHA-384 or SHA-512 to test webhook signatures and API authentication.

Tip from Tink: Webhook signatures must be calculated on the exact raw body.

Hex
—
Base64
—

Use this to check webhook signatures from Stripe, GitHub or Shopify against the secret they gave you.

🔒 Runs entirely on your device. Nothing you type is sent anywhere or saved.

Advertisement

How to use the HMAC Generator

  1. Enter the message.
  2. Enter the secret key.
  3. Compare the signature with the one you received.

Everything runs in your browser. Nothing you enter is uploaded.