Sign with a secret. Stay local.

Runs in your browser. Message and secret never leave this device.

Algorithm
Output

Sign with a secret using Web Crypto — nothing is uploaded.

Sign messages with HMAC in your browser

Compute HMAC-SHA1 through HMAC-SHA512 of a message and secret with Web Crypto. Useful for webhook signatures and API auth checks — free, no account, nothing uploaded.

Common questions

Are my message and secret uploaded?

No. Signing uses the Web Crypto API in this browser. Bento Tools does not send your payload or secret to a server.

How is the secret encoded?

Both the message and secret are treated as UTF-8 text. Output can be lowercase hex or standard Base64.

Is this for password hashing?

No. HMAC is for keyed message authentication. For storing passwords, use a dedicated password hash such as argon2 or bcrypt.

Is the HMAC Generator free?

Yes. It is a free Bento Tools utility with no account required.

Related tools