HMAC
A keyed-hash message authentication code that proves a message came from a holder of a shared secret.
HMAC (Hash-based Message Authentication Code) combines a cryptographic hash function (e.g. SHA-256) with a secret key to produce a signature that both authenticates and integrity-checks a message. It is the signing primitive behind JWT (HS256/HS384/HS512) and most webhook verification schemes.
Reviewed by The Markvibe Team · Last updated 2026-06-28
Try it with these tools
Related terms
- JSON Web Token (JWT) — A compact, URL-safe token format for transmitting signed claims between parties.
- Cryptographic Hash — A fixed-length fingerprint derived from arbitrary input via a one-way function.