← All tools

Foundations

HMAC sign & verify

Compute a real HMAC-SHA256 over a message and secret, then see why changing even one bit of the message makes verification fail.

1. Compute a tag

2. Verify — edit the message, secret, or tag below and see what happens