Hash generator
MD5, SHA-1, SHA-256, SHA-384 and SHA-512 of any text or file, computed locally. Plus HMAC-SHA256.
HMAC-SHA256
What a hash is
A hash function turns any input into a fixed-length fingerprint. The same input always gives the same hash, and changing a single character changes the whole result. That makes hashes ideal for verifying downloads, detecting changes, and building cache keys.
Hashing happens in your browser: the text never leaves your device, and files are read locally without being uploaded. SHA algorithms use your browser's built-in Web Crypto; MD5 is implemented here because Web Crypto omits it.
Frequently asked questions
Which hash should I use?
Use SHA-256 or SHA-512 for integrity checks and fingerprints. MD5 and SHA-1 are broken for security purposes (collisions can be crafted) but are still fine for non-adversarial checksums, such as detecting accidental file corruption.
Can I use these to store passwords?
No. Fast hashes are the wrong tool for passwords. Use a slow, salted algorithm such as bcrypt, scrypt or Argon2 (in Spring Security: BCryptPasswordEncoder).
Why does the hash of a file differ from the hash of its name?
A hash covers the exact bytes it is given. Hashing the text "report.pdf" is unrelated to hashing the contents of that file; use the file option for files.
What is HMAC?
A hash combined with a secret key, used to verify that a message came from someone who knows the key (for example webhook signatures). The HMAC-SHA256 box below computes it locally.