diff --git a/apisix/plugins/hmac-auth.lua b/apisix/plugins/hmac-auth.lua
index b237a2c008f0..d1e1489b2862 100644
--- a/apisix/plugins/hmac-auth.lua
+++ b/apisix/plugins/hmac-auth.lua
@@ -202,7 +202,7 @@ local function validate(ctx, conf, params)
 
     local consumer_conf = consumer.auth_conf
     local found_algorithm = false
-    -- check supported alorithm used
+    -- check supported algorithm used
     if not conf.allowed_algorithms then
         conf.allowed_algorithms = ALLOWED_ALGORITHMS
     end
diff --git a/t/plugin/hmac-auth.t b/t/plugin/hmac-auth.t
index d6127a5336fd..6eb902696913 100644
--- a/t/plugin/hmac-auth.t
+++ b/t/plugin/hmac-auth.t
@@ -556,7 +556,7 @@ client request can't be validated: Clock skew exceeded
 
 
 
-=== TEST 22: update route with defualt clock skew
+=== TEST 22: update route with default clock skew
 --- config
     location /t {
         content_by_lua_block {