A cryptographic hash is a fixed-size string produced from input data. The same input always produces the same hash, but it is impossible to reverse a hash back to the original data.

Which hash algorithm should I use?

Use SHA-256 or SHA-512 for security. SHA-1 is deprecated for security purposes. Use checksums (SHA-256) for file integrity verification.

Hash Generator

Enter text to instantly generate SHA-1, SHA-256, SHA-384, and SHA-512 hashes side by side.

Files never leave your browser

How to use Hash Generator

The Hash Generator creates cryptographic hash digests from text or files in one click, supporting MD5, SHA-1, SHA-256, SHA-384 and SHA-512. Enter any string or upload a file and receive the corresponding hash immediately — ideal for generating ETags, building content-addressed caches, verifying download integrity and constructing HMAC signatures for API authentication.

Select the hash algorithm from the dropdown (SHA-256 recommended for security).
Choose whether to hash a text string or a local file.
Enter the text or drag and drop a file onto the upload zone.
Optionally toggle uppercase/lowercase hex output.
Click Generate Hash and copy the resulting digest.
To verify a file, paste the expected checksum and click Verify — the tool confirms a match or mismatch.

Your data never leaves your device — 100% private processing.

Using hashes for file integrity verification

Software download pages typically publish a SHA-256 or SHA-512 checksum alongside each binary. After downloading, you compute the hash of the local file and compare it with the published value. An identical digest proves the file was not corrupted in transit and has not been tampered with by a man-in-the-middle. This is particularly important for installers and OS images where a compromised file could silently install malware.

HMAC and keyed hashes

HMAC (Hash-based Message Authentication Code) extends a cryptographic hash by incorporating a secret key, producing a value that can only be reproduced by a party who knows the key. HMAC-SHA256 is the signature algorithm used by AWS Signature Version 4, GitHub webhook payloads and many REST API authentication schemes. The key input prevents an attacker from forging a valid MAC even if they know the algorithm and message content.

Glossary

SHA-256: A 256-bit cryptographic hash function from the SHA-2 family, widely used in TLS, code signing and blockchains.
HMAC: Hash-based Message Authentication Code — a keyed hash used to authenticate message integrity.
Hex encoding: Representing each byte of a digest as two hexadecimal digits, producing a string twice the byte length.
ETag: An HTTP header containing a hash of a resource's content, used for cache validation.
Key derivation: Using a hash function with added salt and iterations (bcrypt, Argon2) to safely derive keys from passwords.

Frequently Asked Questions

Free · No spam

Get weekly tool tips & updates

New tools, power-user tips, and productivity hacks — delivered free every Friday.

No spam, ever. Unsubscribe with one click.

Why use Hash Generator?

No installation — use directly from any browser
Handles large inputs without crashing or timeouts
Syntax highlighting and formatted output for readability
Copy to clipboard shortcut for fast workflow integration

Common use cases

Validate and format JSON responses from APIs
Encode/decode Base64 strings during debugging
Generate UUIDs for database seeds or test data
Minify CSS or JavaScript before deployment
Diff two code snippets to spot regressions

Related Developer Tools

Base64 Encoder & Decoder

Encode text or files to Base64, or decode Base64 strings back to text. Fast, free, and runs entirely in your browser.

JWT Decoder

Decode and inspect JSON Web Tokens (JWT) online. View header, payload, and expiry. 100% client-side — your token never leaves your browser.

JSON Formatter & Validator

Format, validate, and minify JSON instantly. Includes syntax highlighting, error detection, and a collapsible tree view — free, private, in-browser.

Regex Tester

Test and debug regular expressions online. See live matches, capture groups, and replace output. Free, private, instant.

URL Encoder / Decoder

Encode and decode URLs and URL components online. Convert special characters to percent-encoding and back instantly — free, private, and fast.

HTML Encoder / Decoder

Encode and decode HTML entities online. Escape <, >, &, and quote characters for safe HTML display. Free, instant, and private — runs in your browser.

Explore all Developer Tools.