Hash Generator

MD5, SHA-1 and SHA-2 hashes and HMACs of text or files.

About this tool

Compute MD5, SHA-1, SHA-256, SHA-384 and SHA-512 of any text or file, or an HMAC with a secret key. Files are read locally and never uploaded, so it works for checking download checksums too.

How to use it

  1. Choose Text or File as the input.
  2. Type text or drop a file. Files are read locally and never uploaded.
  3. Read MD5, SHA-1, SHA-256, SHA-384 and SHA-512 at once, in hex or Base64.
  4. For signed messages, turn on HMAC and enter the secret key.

Questions

How do I verify a downloaded file?
Choose File, drop the download, and compare the SHA-256 value with the checksum published by the project. If even one character differs, the file is not the same.
Can I use MD5 or SHA-1 for passwords?
No. They are too fast and have known weaknesses. Store passwords with a slow password hash such as Argon2, bcrypt or scrypt.
What is an HMAC?
A hash combined with a secret key. It proves that a message came from someone who knows the key and wasn’t changed. Webhooks from services like Stripe and GitHub are signed this way.
Why does my hash differ from another tool?
Usually because of invisible differences in the input: a trailing newline, Windows line endings, or a different text encoding. Here, text is always hashed as UTF-8 exactly as typed.

Something not working, or a result looks wrong? Report a problem with this tool