How to generate a hash
- Type or paste text, or choose a file. Files are read locally and never uploaded.
- MD5, SHA-1, SHA-256, SHA-384 and SHA-512 are calculated at once.
- Add a key to compute HMAC signatures instead of plain hashes.
- Paste a known hash into Compare with to verify a download or a signature.
Notes
- Text is hashed as UTF-8, the same as
echo -n "text" | sha256sumon Linux and macOS. - The same input always produces the same hash, and the smallest change produces a completely different one.
Frequently asked questions
Which hash algorithm should I use?
Use SHA-256 for checksums, signatures and general integrity checks. MD5 and SHA-1 are broken for security purposes: attackers can create collisions, so only use them to match legacy systems or detect accidental corruption.
Can I hash passwords with this?
Do not store passwords as plain MD5 or SHA hashes. They are fast to compute, which makes brute force easy. Use a slow, salted algorithm such as Argon2, scrypt or bcrypt.
What is an HMAC?
An HMAC combines a secret key with a hash function to produce a signature. Only someone with the key can create or verify it, which is how APIs and webhooks (for example Stripe and GitHub) prove a request is authentic.
How do I verify a file checksum?
Choose the file, then paste the checksum published by the download page into the "Compare with" box. The matching algorithm is highlighted, or you are told that nothing matches.