Skip to content
uencoder
PIPELINE Hashing & Validation Intermediate 1 step

HMAC sign and verify

A complete sign-then-verify cycle for webhook or API authentication. The first node produces an HMAC-SHA256 tag using your secret key; the second node compares the produced tag against the expected signature. A match confirms both the message integrity and the shared secret are correct.

What it solves

Generate an HMAC signature for a message and verify it against an expected signature.

Input → Output

HMAC Generator input → HMAC Generator output across 1 step.

Runs in

1–2 minutes · fully local in your browser.

Before you start

  • The message to sign
  • A shared secret key
  • The expected HMAC signature for comparison

The pipeline

  1. 1 HMAC Generator hmac-generator

    Generate HMAC (Keyed-Hash Message Authentication Code) with SHA-1/256/512. Free, private, and 100% client-side.

    Params: algorithm=SHA-256, key=shared-secret, outputFormat=hex

Open in Toolchain

Runs locally in your browser. The recipe defines the pipeline only — your input never leaves this tab.

▶Run this workflow

Enter your input below and click Run. All processing happens locally in your browser — nothing is uploaded.

Pipeline progress

  1. HMAC Generatorhmac-generator

Sample input

payload:order=42;amount=99.00

Expected output

4a007f2972f805a794eb45fb82f6035c688142d4122af8ad85fb42add7c06165

This pair is executed against the real tools at build time (tests/unit/recipes.test.ts) — the expected output is verified, not illustrative.

Related workflows

HMAC-sign an API request string
Generate an HMAC-SHA256 signature for a request payload to authenticate API calls.
PIPELINE
Hash text and verify integrity
Compute a hash of the input text and compare it against an expected hash to verify integrity.
PIPELINE

You might also need

Workflows sharing tools or topics with this recipe.

HMAC Sign then Base64 Encode
Generate HMAC signature then Base64-encode for API auth headers.
PIPELINE
Base64 encode then decode round-trip
Encode text to Base64 and decode it back to verify the round-trip preserves the original data.
PIPELINE

Learn more

Choosing a hash algorithm: digests, password hashing, and MACs are three different jobs
A field guide to SHA-2, SHA-3, BLAKE2, MD5, bcrypt/Argon2, and HMAC — which one fits integrity checks, password storage, and message authentication, and why they are not interchangeable.
TUTORIAL
How to Chain Encoding and Hashing Workflows
Real data-processing tasks rarely use a single tool. This tutorial shows how to compose encoding and hashing tools into multi-step pipelines: a base64-to-hash-to-hex verification chain, parallel multi-algorithm integrity checking, and an automatic encoding-format conversion chain. Each pattern maps to an existing workflow recipe (base64-encode-decode-verify, hmac-sign-verify) and explains when to use inline tool chaining versus a saved recipe.
TUTORIAL

Tools used

HMAC Generator
Generate HMAC (Keyed-Hash Message Authentication Code) with SHA-1/256/512. Free, private, and 100% client-side.
TOOL
Hash Compare
Compare MD5, SHA-1, SHA-256, SHA-384, SHA-512 of the same input. Free, private, 100% client-side.
TOOL