DeveloperKit

Hash Generator

Generate MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes and HMACs of text or files. Free, private, and 100% in your browser.

Input Text

0 characters · 0 B (UTF-8)

Hashes

  • MD5128 bits · Checksums only. Broken for security use.

    —

  • SHA-1160 bits · Legacy. Collisions are practical; avoid for security.

    —

  • SHA-256256 bits · SHA-2. The modern default for integrity and signatures.

    —

  • SHA-384384 bits · SHA-2. Truncated SHA-512 with a different start value.

    —

  • SHA-512512 bits · SHA-2. Fastest SHA-2 on 64-bit hardware.

    —

What Is a Hash Function?

A cryptographic hash function turns input of any size into a fixed-size fingerprint, called a hash or digest. The same input always gives the same hash, and changing a single bit changes the output completely. Hashes are used to verify file downloads, detect changes, deduplicate data, and build digital signatures.

SHA-256 of "hello"
2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824

Features

  • All common algorithms

    MD5, SHA-1, SHA-256, SHA-384, and SHA-512 are computed at once, live as you type.

  • HMAC support

    Enable HMAC and enter a secret key to get HMAC-MD5, HMAC-SHA1, HMAC-SHA256, HMAC-SHA384, and HMAC-SHA512.

  • File checksums

    Hash any file up to 512 MB to check a download against its published MD5 or SHA-256 checksum.

  • Checksum comparison

    Paste an expected hash and the matching algorithm is highlighted automatically.

  • Hex or Base64

    Output lowercase hex, uppercase hex, or Base64, whichever your system expects.

  • Private by design

    Hashing uses the browser's native Web Crypto API. Your text and files are never uploaded.

How to Generate a Hash Online

  1. Type or paste text, or switch to File and choose or drop a file.
  2. MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes appear instantly.
  3. Optionally enable HMAC and enter a secret key, or change the output to uppercase hex or Base64.
  4. Paste an expected checksum to confirm a match, then copy the hash you need.

MD5 vs SHA-1 vs SHA-256 vs SHA-512

MD5 (128-bit) and SHA-1 (160-bit) are fast and widely supported, but researchers can create two different inputs with the same hash. Use them only for checksums where nobody is trying to fool you. SHA-256, SHA-384, and SHA-512 belong to the SHA-2 family and have no known practical attacks. SHA-256 is the standard choice for TLS certificates, Git, package managers, and code signing.

Frequently Asked Questions

Is my data uploaded when I generate a hash?

No. All hashes are calculated in your browser. Text and files never leave your device, which makes this tool safe for API keys, tokens, and private documents.

Which hash algorithm should I use?

Use SHA-256 for integrity checks, signatures, and new systems. SHA-512 is equally secure and often faster on 64-bit machines. MD5 and SHA-1 are only suitable for non-security checksums and compatibility with older systems, because practical collisions exist for both.

Can I use SHA-256 or MD5 to store passwords?

No. Fast hashes like MD5 and SHA-256 can be brute-forced at billions of guesses per second. Store passwords with a slow, salted algorithm such as bcrypt, scrypt, or Argon2. Use our Bcrypt Generator for bcrypt hashes.

Why does my hash differ from another tool?

Hashes depend on the exact bytes. Trailing spaces or line breaks, Windows (CRLF) versus Unix (LF) line endings, and text encoding all change the result. This tool hashes text as UTF-8 exactly as entered.

What is an HMAC?

An HMAC (hash-based message authentication code) combines a hash function with a secret key. Only someone who knows the key can produce the same value, so HMACs are used to sign webhooks, API requests, and JWTs (HS256).

Can a hash be decrypted?

No. Hashes are one-way functions; there is no key to reverse them. So-called hash decrypters only look up previously computed hashes of common inputs.

Related Tools

  • JWT Decoder

    Decode and debug JSON Web Tokens, see when they expire, and verify HS, RS, PS, ES, and EdDSA signatures.

  • JWT Encoder

    Create and sign JSON Web Tokens with HS256, RS256, ES256, PS256, or EdDSA, and generate test key pairs.

  • Bcrypt Generator

    Hash passwords with bcrypt at any cost factor and verify a password against an existing bcrypt hash.

  • UUID Generator

    Generate v4, v7, v1, v5, and v3 UUIDs / GUIDs in bulk, and inspect any UUID's version and timestamp.