HMAC
A keyed hash that proves a message is unaltered and came from someone holding the key.
What it means
HMAC combines a secret key with a hash function such as SHA-256. Two parties who share the key can each compute it over a message and compare; nobody without the key can produce a matching value.
How Onekey handles it
Onekey uses HMAC-SHA256 in two places: to sign webhook deliveries, and to sign pagination cursors so they cannot be altered or moved to another query.