# How many codes can I safely generate using the same HMAC key?

Can an attacker guess the key given enough codes for the same key? And if so, how many times is it safe to use the same key?

They show that HMAC may have less security than previously thought after the birthday bound. Generally, if you have a hash output size of, say 256 bits for SHA-256 then you may have to start worrying after $$2^{128}$$ messages. This is of course not a limit that should worry you.
Even for SHA-1 you're probably going to be fine. However, you may want to stop using (MD5 for which the bound is a worrying $$2^{64}$$) and SHA-1 by now for other reasons than just the output size; there are too many attacks on those hash functions and attacks only get better.