Dev Tools, 7 tools

Converters, 4 tools

Text Tools, 5 tools

Color Tools, 2 tools

Generators, 3 tools

Image Tools, 4 tools

PDF Tools, 6 tools

Calculators, 4 tools

Open tools · 0

About

Hash Generator

Hash text as you type, or a file of any size: the file is streamed through your browser, never uploaded, with a progress bar and a cancel button. Seventeen algorithms, an HMAC, and the check that is usually the real question: paste the checksum a download page lists and it says whether your file matches, and which algorithm it matched.

What it does

  • MD5, SHA-1 and the SHA-2 family: SHA-224, SHA-256, SHA-384, SHA-512 and SHA-512/256.
  • SHA3-224 to SHA3-512 and the Keccak-256 that Ethereum uses; RIPEMD-160; BLAKE2b, BLAKE2s and BLAKE3; CRC-32.
  • The broken algorithms marked as such, so MD5 and SHA-1 are not mistaken for security.
  • Files of any size, read in chunks, with progress and cancel.
  • Verify: paste an expected hash and the match is named, algorithm included.
  • HMAC with a secret key; input read as UTF-8 text, or as hex or Base64 bytes.
  • Output as lower or upper case hex, or Base64; copy one or all.

How to use it

  1. Type or paste text, or drop a file on the window.
  2. Read the digests and copy the one you need.
  3. To check a download, paste the checksum from its page into Verify.
  4. For an HMAC, switch it on and enter the key.

What it does not do

  • MD2, MD4, NTLM, Whirlpool and the rest of the long tail: nobody verifies a download with them.
  • Password hashing (bcrypt, argon2, scrypt, PBKDF2): a different job with rules of its own, a salt and a cost factor among them.
  • Share links: there is no server to hold them.

Questions

Is MD5 safe?

As a checksum against accidental corruption, yes. Against someone who can make two files with the same hash, no: collisions have been practical since 2004. It is marked as broken here, with SHA-256 beside it.

Is my file uploaded?

No. It is read in chunks by your browser and hashed there, which is why a file of several gigabytes works: it never has to fit in memory at once.

Which hash does a download page mean when it does not say?

Paste it and the length tells: 32 hex characters is MD5, 40 is SHA-1, 64 is SHA-256 and 128 is SHA-512. The tool names the one that matched.

Why is CRC-32 so short?

It is a 32-bit check, 8 hex characters, made for catching transmission errors, not for security. MD5 is 128 bits and SHA-256 is 256.

Everything here runs in your browser. Nothing you type, paste or open is uploaded, and there is no account and no queue. How that works.

For one job

Often used with

More in Dev Tools

  • JSON Formatter: Format, validate, repair and explore JSON: tree view, sorted keys, and big numbers kept exactly.
  • Regex Tester: Test JavaScript regular expressions live: highlighted matches, capture groups, replace, and a plain-English explanation.
  • Unix Timestamp Converter: Turn Unix timestamps in seconds, milliseconds or nanoseconds into dates and back, many at once, with Excel, Windows and Discord times too.
  • URL Encode & Decode: Percent-encode or decode text for a URL with the kinds of escaping told apart, and take a link apart: edit its query, strip its tracking, see its real host.
  • Cron Expression Parser: Read a cron expression in plain English, see its next runs in any time zone and what a clock change does to them, or build one; Unix, Spring, Quartz and EventBridge.

All toolsAbout utilbrewPrivacy