HMAC產生器
使用SHA-1、SHA-256、SHA-384或SHA-512產生HMAC簽章。
如何使用本工具
- 1
Pick a hash algorithm from the dropdown: SHA-1, SHA-256, SHA-384, or SHA-512.
- 2
Type or paste your shared secret key into the key field.
- 3
Type or paste the message you want to authenticate into the message box.
- 4
Click Generate to compute the HMAC; the lowercase hex digest appears below.
什麼是HMAC產生器?
HMAC(Hash-based Message Authentication Code,以雜湊為基礎的訊息驗證碼)使用共享的金鑰來驗證訊息的完整性和真實性。它是webhook簽章、API請求簽章(AWS Signature V4、Stripe的webhook)以及JWT的HS256/HS384/HS512演算法的基礎。
常見使用場景
Verify an incoming webhook by recomputing the HMAC of the raw request body with your endpoint's signing secret and comparing it to the provider's signature header.
Check a Stripe webhook locally: HMAC-SHA256 the timestamped payload with your whsec_ secret to confirm your verification logic before deploying.
Debug a mismatched signature by pasting the exact bytes your server and client each signed to see which side is wrong.
Generate a quick integrity tag for a config file or message so a teammate with the same key can confirm it was not altered in transit.
Teach or learn how HMAC differs from a bare hash by toggling algorithms and watching the digest length change.
Sanity-check a single HMAC step of a larger signing scheme (such as one round of the AWS SigV4 key-derivation chain) during development.
常見問題
HMAC和雜湊是一回事嗎?▼
相關工具
密碼雜湊產生器(PBKDF2)
使用 PBKDF2-SHA256 在你的瀏覽器中產生安全的密碼雜湊。比 MD5 或簡單 SHA 更強,工作因子可調。
AES-256 加密
使用 AES-256-GCM 加密和解密文字。金鑰透過 PBKDF2-SHA256 從你的通行碼衍生而來。
2FA QR Code 產生器
為 Google Authenticator、Authy、1Password 及其他 2FA 應用程式產生 TOTP QR Code。
密碼強度檢測器
根據字元集大小和常見密碼清單檢測你密碼的熵值。完全離線執行。
凱撒密碼編碼與解碼工具
使用凱撒密碼對文字進行編碼或解碼:按固定位移替換字母。
ROT13編碼與解碼工具
使用ROT13對文字進行編碼或解碼:一種位移13位、且自身互逆的凱撒密碼。