Elixir: function :crypto.hmac/3 is undefined or private

Quick fix

Read the commands before running them. Anything that restarts a service, deletes data or changes permissions should be tried on a non-production system first.

# Confirm the OTP release you are actually running
erl -noshell -eval 'io:format("~s~n", [erlang:system_info(otp_release)]), halt().'

# Find which dependency still calls the removed function
grep -rn "crypto.hmac\|:crypto.hmac" deps/ lib/

# Usually the fix is to upgrade that dependency
mix hex.outdated
mix deps.update plug_crypto jose

# In your own code, switch to the new API
# :crypto.hmac(:sha256, key, data)  becomes
# :crypto.mac(:hmac, :sha256, key, data)

mix deps.clean --all && mix deps.get && mix compile

How to diagnose Elixir errors

Elixir errors are shaped by the actor model: a GenServer.call timeout does not mean the server crashed, it means the server was busy for longer than the caller was willing to wait. The right question is usually "what is that process doing?" rather than "why did the call fail?". Because supervisors restart failed processes automatically, transient errors can also hide in the logs while the system appears healthy.

If the quick fix above does not resolve it, work through these steps. They apply to this whole class of error, not just to this one message, which is usually what saves the time.

1. Attach to a running node with iex --remsh and inspect the process: Process.info(pid, :message_queue_len). A growing mailbox means the process is the bottleneck.
2. Use :observer.start() to see the supervision tree, process memory and message queues visually.
3. Move long-running work out of handle_call. Use handle_cast, a Task, or a dedicated pool so the GenServer stays responsive.
4. Check restart intensity. A supervisor that exceeds max_restarts takes down its own supervisor, producing a cascade that looks like an unrelated failure at the top.
5. For compile errors in dependencies, run mix deps.compile --force and check that any required native toolchain (make, gcc, erlang headers) is installed.

Tools worth reaching for

• :observer.start()
• iex --remsh
• Process.info/2
• mix deps.tree
• :recon

Authoritative references

Primary documentation for this error, worth reading before applying any fix in production.

📖 erlang.org 📖 erlang.org

Related Elixir errors

• (Mix) You're trying to run :my_app on Elixir v1.15.7 but it has declaredThe elixir: requirement in mix.exs (for example "~> 1.17") does not match the Elixir on your…
• Ecto: (Ecto.Query.CastError) value "abc" in where cannot be cast to type :idA value went into a query uncast, usually a path or query parameter straight from Phoenix…
• Ecto: connection not available and request was dropped from queueEvery connection in the pool was busy for longer than queue_target allowed, so DBConnection…
• Ecto: could not lookup Ecto repo MyApp.Repo because it was not startedEcto found the repo module but no running process registered under it. The code is fine; it…
• Elixir: (ArgumentError) errors were found at the given argumentsThis is OTP's wording for a bad argument passed to a built-in function, and the line after it…
• Elixir: (DBConnection.ConnectionError) tcp recv: closedThe database closed a pooled socket that Ecto still believed was usable, so the checkout…
• Elixir: (FunctionClauseError) no function clause matchingEvery clause of the function was tried and none matched the arguments, either on the pattern…
• Elixir: (KeyError) key :name not found in: %{"name" => "ada"}Dot access and `Map.fetch!/2` raise rather than returning nil when a key is missing, and the…

See all 18 Elixir errors →

Browse other categories

• HTTP 494xx client errors, 5xx server errors, redirects, headers and protocol problems.
• JavaScript 42npm resolution, async pitfalls, hydration, memory limits and runtime type…
• Database 41Connections, deadlocks, constraints, replication and memory limits.
• AI 35Rate limits, context windows, GPU memory and model-serving failures.
• Network 35Refused connections, timeouts, resets, MTU problems and port exhaustion.
• Python 35Imports, virtual environments, encoding, concurrency and dependency conflicts.
• Kubernetes 34CrashLoopBackOff, ImagePullBackOff, OOMKilled, RBAC, scheduling and storage.
• Docker 27Daemon connectivity, disk space, image pulls, ports and architecture mismatches.
• System 26Disk space, systemd units, file descriptors, OOM killer and scheduled jobs.
• Cloud 25IAM permissions, quotas, service limits and credential failures.
• Security 25JWT validation, CSRF, OAuth grants, SELinux, SSH host keys and CSP.
• TLS 24Untrusted authorities, expiry, hostname mismatch, chains and cipher negotiation.

Something missing or wrong?

This entry is maintained by hand. If the fix is out of date, incomplete, or you have a better one, email a correction and it will be reviewed.