What is the Hash Generator?
A hash is a short fingerprint of data: change one character and the hash changes completely. Use this tool to create checksums for files, verify that a download has not been corrupted or tampered with, compare two files without opening them, or generate HMAC signatures for API requests and webhooks.
All six algorithms are calculated at once, for text or for files of any size, which are read in chunks directly on your device. Paste an expected checksum, such as the SHA-256 published on a download page, and the matching algorithm is highlighted.
How to use it
- Choose Text or File.
- Type text, or drop a file (it is read on your device, never uploaded).
- Optionally enter an HMAC secret key.
- Copy the hash you need, or paste an expected hash to verify it.
Example
abc
MD5 900150983cd24fb0d6963f7d28e17f72 SHA-256 ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad
Features
- Six algorithms. MD5, SHA-1, SHA-256, SHA-384, SHA-512 and SHA3-256, all at once.
- Large files. Files are hashed in chunks with a progress bar, so even gigabytes work.
- HMAC. Add a secret key to compute HMAC signatures, as used by webhooks and APIs.
- Verify checksums. Paste an expected hash in hex or Base64 and see instantly whether it matches.
- Output formats. Lowercase hex, uppercase hex or Base64.
- Private. Files and text are hashed on your device and never uploaded.
Frequently asked questions
Which hash should I use?
SHA-256 for almost everything: file checksums, integrity checks and signatures. MD5 and SHA-1 are broken for security (collisions can be created on purpose) and should only be used to match old systems or non-security checksums.
Can I hash passwords with this?
Do not store passwords with plain hashes like these. Use a slow password hashing function such as Argon2, bcrypt or scrypt, which are designed to resist guessing.
What is HMAC?
A hash mixed with a secret key, used to prove a message came from someone who knows the key and was not changed. Payment gateways and webhooks (Razorpay, Stripe, GitHub) sign requests with HMAC-SHA256.
Why does my hash differ from another tool’s?
Usually because of invisible differences in the input: a trailing line break, Windows (CRLF) line endings or a different text encoding. This tool hashes text as UTF-8 exactly as typed.
Are my files uploaded?
No. Files are read and hashed in your browser; nothing is sent anywhere.
Last updated · Free, no sign-up, runs in your browser.