---
title: "Feature: #102761 - Introduce class to generate/validate HMAC hashes"
manual: "TYPO3 Core Changelog"
version: "main"
permalink: "https://docs.typo3.org/permalink/changelog:feature-102761-1704532036"
source: "Changelog/13.0/Feature-102761-IntroduceClassToGeneratevalidateHMACHashes.rst"
typo3-version: "13.0"
typo3-major: 13
type: "feature"
issue: 102761
forge: "https://forge.typo3.org/issues/102761"
tags: ["ext:core"]
rendered: "2026-09-20T18:31:11+00:00"
---

# Feature: #102761 - Introduce class to generate/validate HMAC hashes {#feature-102761-1704532036}

See [forge#102761](https://forge.typo3.org/issues/102761)

## Description {#description}

A new class  `\TYPO3\CMS\Core\Crypto\HashService` has been introduced to
enhance the security and flexibility in generating Hash-based Message
Authentication Codes (HMACs). This class combines the functionality of
`GeneralUtility::hmac()` and Extbase's `HashService`, while
enforcing the use of an additional, mandatory secret for HMAC generation and
HMAC string validation.

## Impact {#impact}

Using the new class  `\TYPO3\CMS\Core\Crypto\HashService`, it is now
possible to mitigate the risk of HMAC reuse in unauthorized scenarios for the
same input.