Hash Generator
Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes and HMACs for text or files — instantly and privately.
Hashes
-
MD5
-
SHA-1
-
SHA-256
-
SHA-384
-
SHA-512
MD5 and SHA-1 are not collision-resistant. Use them only for checksums, never for passwords or digital signatures.
100% private: everything runs in your browser and nothing is uploaded.
How to Generate a Hash
No sign-up, no installation — it works right here in your browser.
- Step 1:Choose Text and type your input, or choose File and select the file you want to hash.
- Step 2:Optionally enable HMAC and enter a secret key, and choose hex, uppercase hex or Base64 output.
- Step 3:Copy any hash with one click, or paste an expected checksum into the compare box to verify it.
Hash Generator FAQ
What is the difference between MD5, SHA-1 and SHA-256?
They produce 128-, 160- and 256-bit hashes respectively. MD5 and SHA-1 are fast but broken for security because collisions can be created; SHA-256 and SHA-512, members of the SHA-2 family, are the current standard for integrity and security checks.
Can a hash be reversed or decrypted?
No. Hash functions are one-way. Short or common inputs such as simple passwords can be guessed with lookup tables, which is why passwords should be stored with slow, salted algorithms like bcrypt or Argon2 instead of a plain hash.
How do I verify a file checksum?
Select File, choose the downloaded file and paste the checksum published by the vendor into the compare box. If it matches the SHA-256 (or other) value, the file is intact and unmodified.
What is an HMAC?
An HMAC combines a hash function with a secret key. Only someone who knows the key can produce the same value, so HMACs such as HMAC-SHA256 are used to sign API requests and verify webhooks from services like Stripe or GitHub.
Are my files or text uploaded?
No. All hashes are computed locally in your browser. Neither the text, the file nor the HMAC key is ever sent to a server.
What Is a Hash and What Is It Used For?
A cryptographic hash function turns any input — a password, a JSON payload or a 2 GB ISO image — into a short, fixed-length fingerprint. The same input always produces the same hash, while changing even a single bit produces a completely different one, and it is practically impossible to work backwards from the hash to the original data. That makes hashes ideal for verifying file downloads against a published checksum, detecting changed files, building cache keys and ETags, deduplicating data and signing webhook payloads with an HMAC.
This free hash generator calculates MD5, SHA-1, SHA-256, SHA-384 and SHA-512 at the same time for text or files, using the browser's native Web Crypto API for the SHA family. Switch on HMAC mode to produce keyed hashes such as HMAC-SHA256 for API signatures and webhook verification, choose hex, uppercase hex or Base64 output, and paste an expected value into the compare box to confirm a checksum instantly. Files are read locally and never uploaded, so you can safely hash confidential documents, private keys or installers. Remember that MD5 and SHA-1 are no longer collision-resistant: use them only for non-security checksums, and prefer SHA-256 or stronger everywhere else.