IT lexicon Security HMAC

HMAC Hash-based Message Authentication Code

Security På svenska → Updated: 2026-05-23

A way to sign messages with a shared secret — the recipient can verify the message wasn't tampered with and comes from the right sender.

Stripe, GitHub, Slack use HMAC for webhook signatures: you read X-Signature, compute HMAC yourself with your secret, compare. Different from a digital signature (asymmetric).

← Back to the lexicon