Why do Stripe and GitHub use HMAC?

HMAC guarantees that the incoming webhook payload was generated by the service holder of the secret key and was not modified in transit by a man-in-the-middle.

What Is HMAC? Keyed-Hash Message Authentication Codes Explained

Multiple Hash GeneratorGenerate MD5, SHA-1, SHA-256, SHA-512, SHA-3, Keccak, and CRC32 hashes simultaneously from a single text input.

Tool

SHA-256 GeneratorGenerate cryptographically secure 256-bit SHA-2 hashes instantly in your browser.

Tool

MD5 GeneratorGenerate 128-bit MD5 checksums and message digests online.

Tool

SHA-1 GeneratorGenerate 160-bit SHA-1 message digests (40 hex characters) online.

Tool

SHA-512 GeneratorGenerate high-security 512-bit SHA-2 hashes with 128 hexadecimal characters.

Tool

SHA-3 & Keccak GeneratorGenerate FIPS 202 SHA3-224, SHA3-256, SHA3-384, SHA3-512, and Ethereum Keccak-256 hashes.

Tool

SHA-224 GeneratorGenerate 224-bit SHA-2 cryptographic hashes with 56 hexadecimal characters.

Tool

SHA-384 GeneratorGenerate 384-bit SHA-2 cryptographic message digests (96 hex characters).

Tool

SHA-512/224 GeneratorGenerate FIPS 180-4 SHA-512/224 truncated hashes utilizing 64-bit word architecture.

Tool

SHA-512/256 GeneratorGenerate high-speed FIPS 180-4 256-bit hashes optimized for 64-bit processors.

Tool

RIPEMD-160 GeneratorGenerate 160-bit RIPEMD-160 hashes used in Bitcoin address derivation.

Tool

HMAC GeneratorCalculate RFC 2104 HMAC authentication codes with custom secret keys and algorithm selection.

Tool

HMAC-SHA256 GeneratorGenerate 256-bit HMAC-SHA256 authentication digests for webhooks and API authentication.

Tool

HMAC-SHA512 GeneratorGenerate 512-bit HMAC-SHA512 signatures for high-entropy authentication and JWT HS512.

Tool

Text Hash GeneratorReal-time text string hashing with character count, byte metrics, and encoding options.

Tool

File Hash GeneratorCalculate MD5, SHA-1, SHA-256, and SHA-512 file checksums locally in your browser with zero server uploads.

Tool

Hash ComparatorCompare two hashes side-by-side with case normalization, whitespace trimming, and visual mismatch highlighting.

Tool

File Integrity CheckerUpload a file and paste an expected checksum to instantly verify authenticity and integrity.

Tool

Checksum CalculatorCalculate CRC32, Adler-32, MD5, and SHA-256 checksums and export standard .sha256 and .sfv files.

Tool

CRC32 CalculatorCalculate IEEE 802.3 standard 32-bit Cyclic Redundancy Checks for text and binary data.

Tool

CRC32C CalculatorCompute Castagnoli 0x1EDC6F41 CRC32C checksums used in cloud storage, iSCSI, and ext4.

Tool

Hash Format IdentifierAnalyze unknown hash strings and identify likely algorithms based on length, entropy, and character patterns.

Tool

Hash Encoding ConverterConvert hash digests losslessly between Hex, Base64, Base64URL, Binary, Decimal, and SRI formats.

Tool

Hash Length Calculator & MatrixInteractive lookup matrix of bit lengths, byte sizes, hex lengths, and base64 dimensions for all major hash algorithms.

Tool

What Is a Hash? Cryptographic Hash Functions ExplainedA complete introduction to cryptographic hash functions, the avalanche effect, preimage resistance, and how one-way mathematics protect modern computing.

Guide

What Is SHA-256? Architecture, Rounds, and ApplicationsExplore the internal architecture of SHA-256, its 64-round Merkle-Damgård structure, security guarantees, and pervasive role in web security and blockchain.

Guide

SHA-256 vs SHA-512: Speed, Security, and Architecture ComparisonA detailed benchmark and architectural comparison between SHA-256 and SHA-512, explaining why SHA-512 is frequently faster on modern 64-bit processors.

Guide

MD5 vs SHA-256: Collision Attacks, Security, and Use CasesWhy MD5 is cryptographically obsolete, how practical collision attacks work, and why SHA-256 replaced it as the worldwide security baseline.

Guide

SHA-1 vs SHA-256: The SHAttered Attack and Modern SecurityUnderstanding the demise of SHA-1, the landmark 2017 Google SHAttered collision attack, and how SHA-256 provides uncompromised cryptographic protection.

Guide

Hashing vs Encryption: Key Differences, Functions, and Use CasesClarifying the most common cryptographic confusion: why hashing is a one-way transformation and encryption is a reversible two-way cipher requiring keys.

Guide

Hashing vs Encoding: Digest Integrity vs Data RepresentationUnderstand the distinct roles of hashing (one-way mathematical digest) and encoding (reversible format translation like Base64 or Hex).

Guide

What Is HMAC? Keyed-Hash Message Authentication Codes ExplainedHow HMAC combines secret keys with hash functions (RFC 2104) to prevent length extension attacks and verify message authenticity for webhooks and APIs.

Guide

What Is a Checksum? Error Detection in Files and Data StreamsHow checksums work, their implementation in network packets (TCP/IP), file formats (ZIP/PNG), and the difference between simple parity and cyclic redundancy checks.

Guide

Hash vs Checksum: When to Use Cryptographic Digests vs CRCA side-by-side guide to choosing between high-speed checksums (CRC32, Adler32) and tamper-proof cryptographic hashes (SHA-256, SHA-3).

Guide

How File Hashing Works: Chunked Streams, Buffer Slices, and MemoryLearn the engineering behind client-side file hashing: Web Streams, ArrayBuffers, chunked incremental updates, and how to process 10GB files in a browser tab without crashing.

Guide

How to Verify File Integrity: macOS, Linux, and Windows GuideA practical command-line and GUI tutorial for verifying SHA-256 checksums of downloaded software on Ubuntu, macOS Terminal, and Windows PowerShell.

Guide

Is MD5 Secure? Cryptanalysis History and Collision VulnerabilitiesA historical review of MD5 cryptanalysis, the Wang-Yu attack, flame malware certificates, and why modern systems must forbid MD5 in security contexts.

Guide

Is SHA-1 Secure? The SHAttered Attack and Deprecation TimelineWhy NIST and web browsers formally deprecated SHA-1, how chosen-prefix attacks work, and current compliance mandates.

Guide

What Is SHA-3? Keccak Sponge Construction vs SHA-2An architectural deep dive into the NIST SHA-3 standard, Keccak permutation sponge construction, and why it is immune to length-extension vulnerabilities.

Guide

How Long Is a SHA-256 Hash? Bits, Bytes, Hex, and Base64 MetricsA precise breakdown of SHA-256 length metrics across bits (256), bytes (32), hexadecimal characters (64), Base64 characters (44), and database storage formats.

Guide

About UsLearn about SHAGenerator and our zero-server privacy mission

Page

Privacy PolicyOur zero-server client-side data privacy policy

Page

Terms & ConditionsTerms of service and permitted cryptographic tool use

Page

Contact UsGet in touch with the SHAGenerator team for support or inquiries

Page

What Is HMAC? Keyed-Hash Message Authentication Codes Explained

What Is HMAC? Keyed-Hash Message Authentication Codes Explained

Frequently Asked Questions.

Frequently Asked Questions

Recommended Tools for this Topic