Hash Generator (MD5, SHA-256 & more)
Generate MD5, SHA-1, SHA-256 and SHA-512 hashes of text or files.
Text to hash
Hashes
Start typing to see hashes
About the Hash Generator
Calculate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes all at once — for text you type or for any file you drop in. Output can be hex (upper or lower case) or Base64, and HMAC mode lets you sign data with a secret key, for example to check webhook signatures.
Use the Compare box to verify a download against the checksum published by its author. Files and text are hashed locally in your browser and never uploaded.
How to use the Hash Generator
- 1
Choose text or file
Type text to hash, or switch to File and drop in any file up to 200 MB.
- 2
Get every hash at once
MD5, SHA-1, SHA-256, SHA-384 and SHA-512 are calculated together, live.
- 3
Adjust the output
Pick hex or Base64, toggle uppercase, or turn on HMAC and enter a secret key.
- 4
Compare checksums
Paste an expected hash into Compare to instantly see which algorithm matches.
Frequently asked questions
What is a hash?
A cryptographic hash function turns any input into a fixed-length fingerprint. The same input always gives the same hash, a tiny change gives a completely different hash, and you can't work backwards from a hash to the original data.
Which hash algorithm should I use?
Use SHA-256 or SHA-512 for anything security-related. MD5 and SHA-1 have known collision attacks, so only use them for non-security checksums or compatibility with older systems.
How do I verify a downloaded file?
Switch to File, drop in the downloaded file, then paste the checksum published by the software's author into the Compare box. If it shows a match, the file is intact and unmodified.
What is HMAC?
HMAC (Hash-based Message Authentication Code) combines a hash function with a secret key. Only someone with the key can produce the same result, which is why services like Stripe and GitHub use HMAC-SHA256 to sign webhooks.
Should I hash passwords with SHA-256?
No. General-purpose hashes are designed to be fast, which makes them easy to brute-force. Store passwords with a dedicated password hashing algorithm such as Argon2, bcrypt or scrypt.
More free developer tools
JSON Formatter
Beautify, minify and validate JSON instantly as you type.
Base64 Encoder/Decoder
Convert text to Base64 and back, with full Unicode support.
UUID Generator
Generate random v4 UUIDs — one or many — in the format you need.
JWT Decoder
Decode JSON Web Tokens to inspect the header, payload and expiry.
Timestamp Converter
Convert Unix timestamps to dates and dates to timestamps.
URL Encoder/Decoder
Percent-encode and decode URLs, and break down query strings.
Regex Tester
Test regular expressions with live match highlighting and groups.