Hash Generator
Generate MD5, SHA-1, SHA-256, SHA-384, SHA-512, and CRC32 digests from any text — or from a local file, computed with Web Crypto in your browser, so an untrusted download never has to be uploaded to check it. Paste the checksum the project published and it is compared for you. Choose the input encoding (UTF-8 / hex / base64) and output format, or add an HMAC key to prove who produced a message, not just what it contains. The Identify tab guesses an unknown hash's algorithm; Verify checks a whole list of expected checksums at once. Nothing is uploaded.
Auto-hashes as you type. Ctrl+Enter to re-run.
Hash a local file (verify a download)
How to use the Hash Generator
Generate cryptographic hashes — MD5, SHA-1, SHA-256, SHA-384, SHA-512 — from any text or file. Use the digests for file integrity verification, fingerprinting, cache keys, deterministic IDs, and quick comparisons. The hash is computed entirely in your browser using Web Crypto and the input never leaves your machine.
What it does
- Generates digests in MD5, SHA-1, SHA-256, SHA-384, and SHA-512.
- Hashes text (UTF-8) and files (binary, any size your browser can read).
- Outputs in lowercase hex (default), uppercase hex, or Base64.
- Computes hashes live as you type for short inputs; chunked streaming for files.
- Side-by-side comparison against a known hash for verification.
When to use it
- Verify a downloaded file's checksum against a published SHA-256.
- Generate a deterministic cache key from a piece of content.
- Fingerprint a config or response for change detection.
- Produce a stable test fixture identifier from known input.
- Confirm two pieces of text are byte-identical without copying them around.
- Generate an ETag or content hash for HTTP caching.
How to use it
- Type or paste your text (or drop a file).
- Pick the algorithm: SHA-256 is the modern default; MD5 only for legacy checksums.
- Pick the output format: hex (most common) or Base64.
- Copy the digest, or paste a known hash in the compare field to verify equality.
Tips & pitfalls
- MD5 and SHA-1 are not collision-resistant. Use them only for non-security checksums; pick SHA-256 or stronger for anything security-relevant.
- Hashing is one-way — you cannot reverse a hash back to the original input.
- Hash output differs between formats:
hexis twice the byte length;base64is shorter. - Whitespace and line endings affect the hash — normalize first if you're comparing across systems.
- For password storage, never use raw MD5/SHA — use a slow KDF (bcrypt, scrypt, Argon2).
- Large files are hashed in streaming chunks — the tool stays responsive on multi-GB inputs.
FAQ
- How do I generate a SHA-256 hash online? Paste text, pick SHA-256, and copy the result. The browser computes the digest locally.
- What is the difference between MD5 and SHA-256? MD5 is older, faster, but cryptographically broken. SHA-256 is the modern default for integrity and fingerprints.
- Can I hash a file in the browser? Yes — drop the file in. Hashing runs locally with chunked streaming.
- Is hashing reversible? No — by design. You cannot recover input from a hash. Tools that "decrypt hashes" only look up known rainbow tables.
- Is my input uploaded? No. All hashing uses Web Crypto in your browser.
- Which algorithm should I use for passwords? None of these directly — use a slow password hash like bcrypt, scrypt, or Argon2 in your backend.
- Why do hex and Base64 outputs look different? Same hash, different encoding of the same bytes. Hex is twice as long; Base64 is more compact.
Runs locally in your browser using Web Crypto. No uploads. MD5 and SHA-1 are checksum-only — use SHA-256+ for anything security-relevant.