JSON 정렬 도구
두 칸 들여쓰기로 JSON을 정렬하거나 한 줄로 압축하고 구문을 확인하세요.
HMAC
HMAC 생성기
Web Crypto로 HMAC-SHA-256 / SHA-512 서명.
브라우저에서 처리 — 데이터가 기기를 떠나지 않습니다
HMAC signs a message with a shared secret for integrity. Computed in-browser via Web Crypto (HMAC-SHA-256 / SHA-512)—key and message never leave your device.
HMAC 생성기 소개
HMAC (Hash-based Message Authentication Code) authenticates a message with a shared secret—common for webhooks, API request signing, and debugging HS* JWTs.
toco.tools computes HMAC-SHA-256 and HMAC-SHA-512 via the Web Crypto SubtleCrypto API entirely in your browser. Keys and messages accept UTF-8 or hex bytes; output is hex (lower/upper) or Base64, with optional verify against an expected value.
Secrets never leave the device. In production verification, use constant-time compares and protect your keys.
사용 방법
- Choose SHA-256 or SHA-512
- Enter secret key and message
- Copy the HMAC or verify against an expected value
자주 묻는 질문
How does HMAC differ from a plain hash?
A hash digests data alone. HMAC mixes in a shared secret so only parties who know the key can produce the same signature.
Are the key or message sent to a server?
No. Everything is computed in your browser with Web Crypto.
Can I use an empty key?
No. Major browsers reject zero-length HMAC keys in Web Crypto—provide at least one byte.