Hash generator
Make MD5 and SHA hashes of text or files, with optional HMAC keys, right in your browser.
Files are processed in your browser and never uploaded.
How to use Hash generator
Add your text
Type or paste your text into the input box. Everything is handled by your own browser, so nothing is sent to a server.
Set the options
Choose Uppercase and Hmac key (optional). The options are visible from the start, not hidden until you paste something.
Read it and keep a copy
The output updates as you type, so there is nothing to submit and nothing to wait for. Copy hash, Don puts the result on your clipboard.
What this tool does
MD5, SHA-1, SHA-256, SHA-384, SHA-512
MD5, SHA-1, SHA-256, SHA-384 and SHA-512 are all here, with SHA-256 the right default for anything security related.
Optional HMAC keyed hashing
Add an HMAC key and the hash becomes a keyed signature, which is what an API asks for when it wants a request signed.
Hash text or any file
Hash text typed into the box, or choose a file of any size and it is read in chunks so a large ISO does not run you out of memory.
Verify download checksums
Comparing the hash of a download against the one the publisher lists is the standard way to confirm a file arrived intact.
Private, works offline
Hashing uses the browser's own crypto, so the text or file is never uploaded and the page works with no connection.
Frequently asked questions
Is my data uploaded anywhere?
No. Hashes are computed entirely in your browser, including files, so nothing is uploaded. It works offline once loaded, apart from a small library fetched once for MD5.
Which algorithms are supported?
MD5, SHA-1, SHA-256, SHA-384 and SHA-512, for text and files, with an optional HMAC keyed hash for the SHA algorithms.
What is the HMAC key for?
An HMAC combines your secret key with the message to produce a keyed hash, which lets you verify that a message came from someone who knows the key and has not been tampered with.
Which algorithm should I use?
Use SHA-256 or stronger for anything security related. MD5 and SHA-1 are only suitable for non-security checksums, and for passwords you should use a dedicated password hashing scheme.
Can I verify a downloaded file?
Yes. Choose the file, pick the algorithm the publisher listed, and compare the result with their published checksum to confirm the file is intact.
Last updated: