Hash Generator (MD5, SHA-1, SHA-256, SHA-512)
A trailing newline or space changes the hash.
When a key is entered, every result below is an HMAC with that key (UTF-8).
About this tool
Compute MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests of text or a file, optionally as an HMAC, and check the result against the checksum published by a download page. All five are calculated at once.
Everything runs in your browser. Your text and files are never sent to a server.
How it works
- SHA-1, SHA-256, SHA-384 and SHA-512 use your browser's built-in Web Crypto API. MD5 is not offered by that API, so it is calculated by code on this page, tested against the standard RFC 1321 test values.
- The input is hashed as raw bytes. Text is encoded as UTF-8. Hashing the same text on Windows with a different line ending, or in a tool that adds a final newline, gives a different result.
- With a key entered, the result is an HMAC (RFC 2104). Use it to check API webhook signatures, for example.
- Files are read into memory in one piece, so the limit is 500 MB. Very large files may still fail on devices with little memory. For multi-gigabyte files, use
sha256sumorGet-FileHash. - SHA-3 and BLAKE are not included.
FAQ
Q. Is MD5 safe to use?
A. Not for security. Collisions can be created on purpose, so MD5 and SHA-1 must not be used for signatures or certificates. They are still fine for spotting accidental corruption. Use SHA-256 or better for anything that matters.
Q. Should I use this to store passwords?
A. No. A plain fast hash is the wrong tool for passwords. Use a slow, salted algorithm such as Argon2, scrypt or bcrypt.
Q. Why is the page asking for a secure connection?
A. The Web Crypto API only works on HTTPS pages (and localhost). If you see an error about it, open the site with https://.