Skip to content

Generate MD5 and SHA hashes

Create MD5, SHA-1, SHA-256, SHA-512, SHA-3 and BLAKE3 hashes of text or files and compare checksums, calculated on your device; nothing is uploaded.

Hashes
Hashes appear here as you type. An empty input has hashes too — type and delete to see them.
Runs in your browser · no uploadHow it works

How to use Hash generator

  1. 1

    Choose Text or Files

    Type or paste text, or switch to Files and drop one or more files of any size.

  2. 2

    Pick the algorithms

    Select the hashes you need — fewer algorithms make big files finish sooner — and the output format.

  3. 3

    Compare or copy

    Paste the expected checksum to see which hash matches, or copy any value with its button.

  4. 4

    Add a key for HMAC

    Switch on HMAC and enter the secret to calculate keyed signatures instead of plain hashes.

Limits and Pro

Free with no sign-up: hash up to 20 files at once with no file size cap (multi-gigabyte files are streamed in 8 MB chunks) and text of any length your browser can hold.

Pro removes the ads; hashing speed and limits are the same on every plan. See Pro

About Hash generator

A hash function turns any input into a short fingerprint of fixed length: change one byte and the fingerprint changes completely. This generator calculates ten of them side by side — MD5, SHA-1, SHA-256, SHA-384, SHA-512, SHA3-256, SHA3-512, BLAKE2b-512, BLAKE3 and CRC32 — for text you type or for files you choose, with output in lowercase hex, uppercase hex or Base64.

Text is hashed as UTF-8 exactly as entered, so it matches what sha256sum or Python's hashlib produce for the same bytes. Files are read in 8 MB slices inside a Web Worker and every selected algorithm is updated in a single pass, which is how a disk image of several gigabytes can be checked without loading it into memory; a progress bar shows the speed in MB/s and Cancel stops the job at once.

Paste the checksum published next to a download into the compare box and the matching algorithm is highlighted — hex in any case, Base64, or a whole line in GNU or BSD checksum format. Switch on HMAC to sign text or files with a secret key using HMAC-MD5, HMAC-SHA-1, HMAC-SHA-2, HMAC-SHA3 or HMAC-BLAKE2b, for example to check a webhook signature.

MD5 and SHA-1 are broken for security purposes and CRC32 only detects accidental corruption; use them for checksums, not signatures. None of these fast hashes is suitable for storing passwords, which need a deliberately slow function such as bcrypt or Argon2.

Privacy

Text and files are hashed by WebAssembly code running in this tab; no file, text or HMAC key is uploaded, and the hashing library is downloaded only when you first type or choose a file. Your algorithm and format choices are kept in local storage; inputs and results are not.

Features

Streams huge files

8 MB chunks in a Web Worker with progress, speed and cancel — no gigabytes in memory.

Checksum compare

Paste a published hash in hex, Base64 or sha256sum format and see the match instantly.

HMAC signatures

Keyed HMAC with MD5, SHA-1, SHA-2, SHA-3 and BLAKE2b for webhook and API checks.

Hash generator: frequently asked questions

Why doesn't my hash match the one from the command line?
Usually the input differs by invisible bytes. echo adds a line break unless you use echo -n, Windows files may end lines with CR LF, and copied text can carry a trailing space. Hashing the file itself on the Files tab avoids copy-paste differences. Also check the algorithm: SHA-256 and SHA3-256 have the same length but different values.
How do I verify a downloaded ISO or installer?
Open the Files tab, drop the downloaded file and paste the checksum from the publisher's site into the compare box. If the matching algorithm turns green, the file is intact. A mismatch means a corrupted or different file. The comparison only proves integrity if the published checksum comes from a trustworthy page or is itself signed.
Is MD5 or SHA-1 still safe to use?
For detecting accidental corruption or deduplicating files they are fine and fast. For anything an attacker could influence, such as signatures, certificates or proving a file wasn't swapped, they are not: practical collision attacks exist for both. Prefer SHA-256, SHA-512, SHA-3 or BLAKE3 for new work, and keep MD5 only where a legacy system requires it.
Can I hash files larger than my computer's memory?
Yes. The file is never loaded whole: the worker reads one 8 MB slice at a time, feeds it to every selected hasher and discards it, so memory use stays flat whether the file is 10 MB or 20 GB. Speed depends on your device and the algorithms chosen; a single SHA-256 is far faster than all ten at once.
What is HMAC and when do I need it?
HMAC combines a hash with a secret key, so only someone who knows the key can produce the same value. Services such as GitHub, Stripe and Slack sign webhooks this way. Paste the raw request body as text, enter the signing secret, pick SHA-256 and compare the result with the signature header, which is often hex or Base64.

Related tools

All developer tools

Password generator

Strong passwords and passphrases, with strength check

Base64 & URL encoder

Encode and decode Base64, URL and HTML entities

UUID generator

UUID v4, v7 and v1 in bulk, plus ULID and Nano ID

JWT decoder

Decode and inspect JSON Web Tokens, verify signatures