Hash Generator (MD5, SHA-256)

How to use

This tool calculates hashes: short fingerprints of text or files. The same input always gives the same hash, and any change gives a completely different one.

1. Choose Text or File.
2. Type or paste text, or choose a file. CRC32, MD5, SHA-1, SHA-256, SHA-384 and SHA-512 all appear at once.
3. Pick the Output style: lowercase hex, UPPERCASE HEX or Base64.
4. Press Copy next to the hash you need.

Check a download. Many download pages list a checksum, usually SHA-256. Hash the file you downloaded, then paste the published checksum into Compare with an expected hash. You can paste a whole checksum file, such as SHA256SUMS, and the tool finds your file's line. If it matches, the file arrived complete and unchanged. The matching row is highlighted, so you don't need to know which algorithm was used. If not, the tool says why.

HMAC. Turn on HMAC with a key to make keyed hashes, used to sign API requests and webhooks. Enter the key as text, hex or Base64.

Text is hashed as UTF-8, exactly as you typed it. If your result differs from a command-line tool, check for a trailing line break: echo adds one unless you use echo -n.

Files are read and hashed on your device, in the background, so even large files don't freeze the page. Files up to 1 GB work. Nothing is uploaded, and the HMAC key is never saved.

CRC32, MD5 and SHA-1 are marked "checksums only". They are fine for spotting accidental changes, but they can be forged, so use SHA-256 or stronger for anything security-related.

Frequently asked questions

Which hash should I use?

Use SHA-256 unless something else is required. It is fast, widely supported and secure. Use MD5 or SHA-1 only to match old checksums, never to protect against tampering.

Can a hash be reversed to get the original text?

No. A hash is one-way. Short, common inputs like simple passwords can be guessed by trying many candidates, which is why passwords should be stored with slow, salted algorithms instead.

Is my file uploaded to calculate the hash?

No. The file is read by your browser and hashed on your device. That is why it works with large files and private documents, and it also works offline once the page has loaded.