Security
Hash Generator
Calculate MD5, SHA-1, SHA-256, SHA-384, SHA-512 and CRC32 at a glance – for texts and files up to 500 MB, optionally as HMAC. Compare checksums from download pages and create Subresource Integrity values.
- Runs entirely in your browser
- No data upload
- No sign-up
- Free
Input
The text is hashed as UTF-8 – exactly as it appears in the field, including spaces and line breaks.
Hashes
Calculating …Compare with expected hash
Guide
How it works
- Text or file
Enter a text or switch to “File” and choose a file or drag it into the field. All hashes appear immediately.
- Choose a format
Hashes as hex in lower or upper case or as Base64 – depending on what the other side expects.
- Compare a checksum
Paste the checksum from the download page into the comparison field. The tool detects the algorithm itself and tells you whether the file is unchanged.
- HMAC and SRI
With a secret key you get HMAC values, e.g. for verifying webhooks. For scripts from third-party servers the tool provides the ready-made integrity value.
FAQ
Frequently asked questions
What is a hash?
A hash is a digital fingerprint of fixed length: any amount of data always produces a value of the same length. Even the smallest change – a single character – results in a completely different hash. The data cannot be recovered from the hash.
Which algorithm should I use?
SHA-256 is today’s standard. MD5 and SHA-1 are considered broken: two different files with the same hash can be created deliberately. They are still fine for simple checksums against transmission errors, but not for security.
Can I use it to store passwords?
No – not even with SHA-256. These algorithms are deliberately fast, attackers can try billions of passwords per second. For passwords there are slow algorithms such as bcrypt or Argon2, e.g. password_hash() in PHP.
Why does my text have a different hash than elsewhere?
Usually because of invisible differences: a space or line break at the end, Windows instead of Linux line breaks or a different character encoding. This tool hashes the text exactly as it appears in the field, as UTF-8.
What is HMAC?
An HMAC is a hash that additionally includes a secret key. Only someone who knows the key can create the correct value. Payment providers and webhooks use it, for example, to verify that a message is genuine and was not modified on the way.
Are my files uploaded?
No. Files are only read in your browser and hashed there – even large files never leave your device.