Sign a message with a secret key to produce an HMAC. Useful for testing API signatures and webhook verification. Runs entirely in your browser.
No. Signing uses the Web Crypto API locally, so neither the key nor the message leaves your browser.
A plain hash can be recomputed by anyone. An HMAC requires the secret key, which lets a receiver verify that a message is authentic and unmodified.
Yes. Web Crypto is only available in a secure context (HTTPS or localhost).