---
url: /process-functions/security-sha256hmachex.md
description: Generate a SHA256 HMAC hash, returned as a hex string.
---

# security.sha256HmacHex

Generate a SHA256 HMAC hash, returned as a hex string. Use this instead of [`security.sha256hmac`](/process-functions/security-sha256hmac) when comparing against a signature the caller has hex-encoded, such as a webhook signing check.

```js
security.sha256HmacHex(key, str);
```

#### Parameters

* `key` - A secret key (string).
* `str` - The string to hash.

```js
let hash = security.sha256HmacHex("mySecret", "Hello"); // "c1727e0f30b8af5e4c571ff0d22d0f5decc63018f2d6e376ac16dc04d06e482c"
```