Glossary: Identity and Access Management

HMAC (hash-based message authentication code)

Also written: HMAC, HMAC-SHA1

A hash worked out over a message together with a secret key. Without the key, nobody can produce the same HMAC. HOTP and TOTP codes come from an HMAC-SHA1 of a counter.