Hash generation workflow

Generate a hash for passwords and file checksums

Hashes verify integrity without revealing content: checksums confirm a file was not altered, and API signing relies on HMAC. The hash generator produces MD5, SHA-1, SHA-256, and SHA-512 digests locally, and the HMAC generator adds keyed signing.

Open Hash GeneratorView the workflow
01

Generate a hash in one paste

The same workflow works for passwords, tokens, and file content.

1

Paste the input

Type or paste the text, token, or file content you want to hash.

2

Pick the algorithm

Choose SHA-256 or SHA-512 for security work; MD5 and SHA-1 for legacy checksums.

3

Run the hash

The digest is calculated locally in your browser.

4

Use the result

Compare it with a published checksum or store it as an integrity reference.

02

Hash, encryption, and checksums

A hash is a fixed-size fingerprint: the same input always produces the same digest, and the process cannot be reversed. Encryption is two-way with a key, and Base64 is just an encoding.

For file integrity, compare the digest against the checksum published by the source. For API authentication, pair the hash generator with the HMAC generator.

03

Where hashing goes wrong

  • Using MD5 or SHA-1 for password storage, which is unsafe
  • Treating a hash as encryption, when it is one-way
  • Hashing with different encodings and getting different results
04

Best practices

  • Use SHA-256 or SHA-512 for modern integrity checks
  • Never store passwords as plain hashes; use a slow key-derivation function instead
  • Hash the exact bytes, not a re-encoded copy, for checksums
05

Frequently asked questions

Is a hash the same as encryption?

No. Hashing is one-way: you cannot recover the input from the digest. Encryption is reversible with a key.

Which algorithm should I use?

SHA-256 or SHA-512 for modern work. MD5 and SHA-1 are only for legacy checksums because they are no longer collision-safe.

Can I use this to store passwords?

Not directly. Password storage needs a slow key-derivation function with salt, such as bcrypt or argon2.

Is my input uploaded?

No. The hash is calculated locally in your browser.

06

Your input stays local

Hashing runs entirely in your browser. The input and the digest never leave your device.

Open Hash Generator