Hash Generator

Text Hash Generator

Enter text to hash

Enable HMAC (secret key)

Used locally for HMAC-SHA256. Avoid production secrets on shared devices.

Enable PBKDF2 key derivation

Generating hashes...

File Hash Generator

Drop a file here or click to upload

Any file type supported

Processing file...

Checksum Verify

Known Hash / Checksum

Text to Verify

Compare Hashes

First Hash

Second Hash

Algorithm Guidance

Integrity checks Use SHA-256 or SHA-512 for modern file and text verification. Treat MD5 and SHA-1 as legacy, non-security checks.

Secrets stay local HMAC and PBKDF2 inputs are processed in the browser. Use test secrets unless your security policy allows this device.

Trust the expected value A matching checksum proves byte equality with the expected digest, not that the source is trustworthy.

Hash Length Reference

MD532 chars

SHA-140 chars

SHA-25664 chars

SHA-38496 chars

SHA-512128 chars

SHA3-25664 chars

SHA3-512128 chars

HMAC-SHA25664 chars

CRC328 chars

Common Use Cases

• Password verification

• File integrity checks

• Digital signatures

• Data deduplication

• Blockchain & crypto

• API authentication (HMAC)

• Software distribution

Output Encodings

Hex: 0-9, a-f (default)

Base64: A-Z, a-z, 0-9, +, /

Binary: 0s and 1s

Frequently Asked Questions

What is the difference between MD5 and SHA-256?

MD5 produces a 128-bit (32-character) hash and is fast but considered cryptographically broken. SHA-256 produces a 256-bit (64-character) hash and is part of the SHA-2 family, widely used for security applications, digital signatures, and blockchain. For any security-sensitive use case, SHA-256 or higher is recommended.

Is MD5 still safe to use?

MD5 is no longer safe for cryptographic purposes like password hashing or digital signatures due to known collision vulnerabilities. However, it is still commonly used for non-security purposes like file integrity checks and data deduplication where collision resistance is not critical.

What is HMAC and when should I use it?

HMAC (Hash-based Message Authentication Code) combines a hash function with a secret key to provide both data integrity and authentication. Use HMAC for workflows such as API authentication and webhook verification, and avoid pasting production secrets into shared or untrusted devices.

How does file hashing work?

File hashing reads the binary content of a file and processes it through a hash algorithm to produce a fixed-length string. This hash acts as a digital fingerprint. If even one bit of the file changes, the hash will be completely different. It is commonly used to verify file downloads, detect tampering, and compare files.

What is the difference between SHA-2 and SHA-3?

SHA-2 (including SHA-256 and SHA-512) and SHA-3 are both secure hash standards published by NIST. SHA-2 is more widely adopted. This tool uses a dedicated in-browser SHA-3 library for SHA3-256 and SHA3-512 because the browser Web Crypto digest API commonly exposes SHA-1 and SHA-2 algorithms, not SHA-3.

Frequently Asked Questions

Use hashes for verification, not secret recovery

What to check

Limitations