Skip to content

HMAC

HMAC is a keyed hash construction that proves a message was produced by someone holding a shared secret, not merely that the bytes are intact.

Webhook providers sign payloads with HMAC because a plain digest can be recomputed by anyone. Always compare signatures in constant time. Continue with Hashing explained: digests, checksums, and integrity for the longer explanation.

Related tools

Related articles