Light
Data Converters JSON ↔ CSV Converter JSON ↔ YAML Converter XML ↔ JSON Converter
Text & Encoding JSON Formatter & Validator Base64 Encode / Decode URL Encode / Decode Markdown to HTML
Dev Utilities Unix Timestamp Converter UUID / GUID Generator CSV to SQL Generator Cron Expression Generator Regex Tester & Explainer JWT Decoder & Inspector Number Base Converter Hash Generator ✓ Password Generator Case Converter LLM Token Counter Diff Checker Image to Base64
Design Color Converter

Free Hash Generator Online – MD5, SHA-1, SHA-256, SHA-512 & HMAC | TrenTyx

trentyx@local:~/dev-utilities/hash-generator $ run hash-generator_

Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 checksums from text or files. Supports HMAC signing, hex / Base64 output, and hash comparison. 100% browser-based — nothing is uploaded to a server.

input.txt 0 chars · 0 B
Input Source
Output Format
Algorithms
No hash generated yet — type some text above or load the sample.
verify-checksum.cmp idle

Comparison is case-insensitive and ignores surrounding whitespace. A matching row is highlighted in green.

What is a Hash Generator?

A hash function turns any input — a password, a JSON payload, or a 2 GB ISO file — into a fixed-length fingerprint called a digest. The same input always produces the same digest, while a single changed byte produces a completely different one. That property makes hashes the standard way to verify file integrity, deduplicate data, build cache keys, and sign API requests. This tool computes MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests using the browser's native Web Crypto API, so your input never leaves your machine.

Common use cases

  • File integrity checks — compare the SHA-256 checksum of a download against the value published by the vendor.
  • API request signing — generate an HMAC-SHA256 signature with a shared secret key for webhooks (Stripe, GitHub, Shopify).
  • Cache keys and deduplication — hash a payload to detect whether content has changed.
  • Git and CI debugging — reproduce a SHA-1 digest by hand when tracing object IDs.
  • Database lookups — verify a stored digest matches the value your application generates.

Which algorithm should you use?

  • SHA-256 — the default choice for anything security-related. 256-bit output, no practical attacks.
  • SHA-512 — same family, larger digest, and often faster than SHA-256 on 64-bit hardware.
  • SHA-1 — broken for collision resistance since 2017. Fine for legacy checksums, never for signatures.
  • MD5 — cryptographically broken. Still widely used as a fast non-security checksum (mirrors, ETags, cache keys).

Frequently asked questions

Is hashing the same as encryption?

No. Encryption is reversible with a key; hashing is one-way. There is no way to "decrypt" a SHA-256 digest — so-called hash crackers simply hash billions of guesses and compare the results.

Can I hash a file?

Yes. Switch the input source to File and select any file. It is read with the browser FileReader API and hashed in memory; nothing is uploaded.

What is HMAC?

HMAC combines a hash with a secret key to prove both integrity and authenticity. Enter a secret in the HMAC field and every selected SHA algorithm switches to HMAC mode. Note that Web Crypto does not support HMAC-MD5, so MD5 is skipped when a key is present.

Should I hash passwords with SHA-256?

No. Plain hashes are far too fast for password storage. Use a purpose-built slow KDF such as bcrypt, scrypt, or Argon2 with a per-user salt.

Related Tools