Hash Generator

Select the Text input mode, type or paste your message into the text area, and the tool instantly computes a SHA-256 hash (along with MD5, SHA-1, SHA-384, and SHA-512). Results appear in real time — no button click required. You can copy any hash with a single click.

Switch to File mode, then drag and drop any file (up to 100 MB) or click the upload area to browse. The tool reads the file entirely in your browser and generates SHA-256 plus four other algorithm hashes simultaneously. No file is ever uploaded to a server.

SHA-256 is a cryptographic hash function from the SHA-2 family. It is widely used for digital signatures, SSL/TLS certificate verification, blockchain and cryptocurrency mining (Bitcoin uses SHA-256), password hashing (with salting), file integrity checks, and data deduplication. Its 256-bit output makes collisions virtually impossible.

MD5 produces a 128-bit hash and is fast but cryptographically broken — use it only for non-security checksums. SHA-1 produces a 160-bit hash and is deprecated for security purposes. SHA-256 (256-bit) and SHA-512 (512-bit) are part of the SHA-2 family and remain secure for cryptographic use. SHA-384 is a truncated variant of SHA-512 offering 384 bits of output.

Yes. You can hash any text string, including passwords, to see its digest in multiple algorithms. For production password storage, always combine the hash with a unique salt and use a purpose-built key-derivation function (bcrypt, scrypt, or Argon2). This tool lets you verify and compare hash outputs during development or testing.

HMAC (Hash-based Message Authentication Code) combines a secret key with a message to produce a keyed hash that verifies both integrity and authenticity. Enter your secret key in the HMAC field, and the tool computes HMAC-MD5, HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 alongside the standard hashes.

All computation happens client-side in your browser using the Web Crypto API (for SHA algorithms) and a pure-JavaScript implementation (for MD5). No data is transmitted to any server. You can verify this by disconnecting your network after the page loads — the tool will continue to work.

After generating hashes, paste your known hash into the Verify Hash field. The tool compares it against every generated result and shows a match or no-match indicator for each algorithm. Comparison is case-insensitive and ignores leading or trailing whitespace.

Yes. Use the Output Format dropdown to switch between hexadecimal and Base64 encoding. When hexadecimal is selected, an Uppercase toggle also becomes available so you can match any required casing format.