Hash Generator

Hash Generator

Calculate MD5, SHA-1, SHA-2, SHA-3, BLAKE2, BLAKE3 and RIPEMD-160 hashes of text or files, generate HMACs with a secret key, and check a download against its published checksum. Files of several gigabytes are read in chunks, locally.

Runs in your browser — nothing you enter is uploaded

How to use

Choose Text and type, or choose File and pick a file of any size.
Tick the algorithms you need — MD5, SHA-1, SHA-256 and SHA-512 are selected by default.
For a keyed hash, tick HMAC and enter the secret key.
To verify a download, paste the checksum from the publisher's website into "Compare with"; the matching row is marked.

Options explained

MD5 / SHA-1: Fast and still widely used for file checksums, but broken for security — attackers can create two inputs with the same hash. Do not use them for signatures or passwords.
SHA-256 / SHA-512: The SHA-2 family, the standard choice for integrity checks, certificates and blockchains.
SHA-3 / BLAKE2 / BLAKE3: Modern alternatives. BLAKE3 is much faster than SHA-2 in software; SHA-3 is the NIST standard with a different internal design.
HMAC: A hash keyed with a secret, used to sign webhooks and API requests (for example GitHub and Stripe webhooks use HMAC-SHA256).

Hash lengths

Algorithm	Output	Hex length
MD5	128 bits	32
SHA-1	160 bits	40
SHA-256 / SHA3-256 / BLAKE3	256 bits	64
SHA-384	384 bits	96
SHA-512 / SHA3-512 / BLAKE2b	512 bits	128

Example

The SHA-256 of abc is:

ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad

The same value from a terminal: echo -n abc | sha256sum on Linux or echo -n abc | shasum -a 256 on macOS.

Frequently asked questions

How do I verify a downloaded file's checksum?

Choose File, select the download, and paste the checksum published on the website into "Compare with". If a row shows Match, the file is identical to the one the publisher hashed.

Are my files uploaded?

No. Files are read in 4 MB chunks by your browser and hashed locally, so even multi-gigabyte ISO images never leave your computer.

Can a hash be reversed to get the original text?

No — hashes are one-way. However, short or common inputs (like "password123") can be found by lookup tables, which is why passwords must be stored with a slow, salted algorithm such as bcrypt or Argon2, not plain MD5 or SHA-256.

Why is my hash different from another tool's?

Usually the input differs — a trailing newline, spaces, or a different text encoding. This tool hashes the exact UTF-8 bytes of what you type. The command-line echo adds a newline unless you use echo -n.

What is the difference between a hash and HMAC?

Anyone can compute a hash of public data. An HMAC also requires a secret key, so it proves the message came from someone who knows the key and was not modified.

Privacy

This tool runs entirely in your browser. Your files and text are processed on your device and are never uploaded to our servers.

Algorithms