TF

Developer Tools

Hash Generator: MD5, SHA-1, SHA-256 and SHA-512

Hash text or files with MD5, SHA-1, SHA-256, SHA-384, SHA-512, and CRC32 — with HMAC and hash comparison.

Runs locally in your browser — your input is not uploaded.

Algorithms
Type text or choose a file — hashes update as you type.

What is this tool?

Hashes turn any input into a short, fixed-length fingerprint. Type text or drop in a file to see every algorithm at once, switch between hex and Base64, add a secret key for HMAC signatures, and paste an expected value to verify a download.

A hash function always produces the same output for the same input, but even a one-character change gives a completely different result. That makes hashes ideal for checksums, cache keys, deduplication, and integrity checks.

SHA-256 and SHA-512 are the modern choices for integrity and signatures. MD5 and SHA-1 are fast and still common for checksums, but are no longer collision-resistant, so don't use them for security. CRC32 is a quick error-detecting checksum used in ZIP and PNG files.

Hashing happens locally with the Web Crypto API; your text, files, and keys never leave your device.

How to use the Hash Generator

  1. Type or paste text, or switch to File and choose any file up to 200 MB.
  2. Tick the algorithms you need: MD5, SHA-1, SHA-256, SHA-384, SHA-512, or CRC32.
  3. Optionally turn on HMAC and enter a secret key to create keyed signatures, as used by webhooks and APIs.
  4. Pick hex, uppercase HEX, or Base64 output, then copy any hash with one click.
  5. To verify a file, paste the expected checksum into Compare — a matching hash is highlighted.

Examples

SHA-256 of “hello”

hello
2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824

Frequently asked questions

Can I decrypt a hash back to the original text?

No. Hashes are one-way functions, not encryption. The only way to “reverse” one is to guess inputs until one matches, which is why long, random passwords are safe even when their hash leaks.

Which algorithm should I use?

Use SHA-256 for most purposes, such as checksums, signatures, and HMAC. Use SHA-512 when you want a longer digest. MD5 and SHA-1 are fine for non-security checksums but should not protect anything sensitive.

What is HMAC?

HMAC combines a secret key with the message before hashing. Only someone with the key can produce the same value, so services like Stripe, GitHub, and Slack use HMAC-SHA256 to sign webhooks.

How do I verify a downloaded file?

Choose File, select the download, and paste the checksum published by the vendor into Compare. If one of the hashes matches, the file is intact.

Should I hash passwords with SHA-256?

Not on its own. Store passwords with a slow, salted algorithm such as Argon2, bcrypt, or scrypt. Fast hashes like SHA-256 can be brute-forced quickly.

Want more power later?

Premium tools, higher limits, and API access are on the roadmap. V1 stays free and private in your browser.