Hash generator (MD5, SHA-256, CRC32…)
Get the most common hashes of a text or a file at once and compare them with the checksum published by the author to make sure a download is neither corrupted nor tampered with. Files are processed in a Web Worker without uploading them anywhere.
Processed 100% in your browser
| MD5 | ||
|---|---|---|
| SHA-1 | ||
| SHA-256 | ||
| SHA-384 | ||
| SHA-512 | ||
| CRC32 |
Ctrl + Enter runCtrl + C copy result
How to use
- 1Choose “Text” and type the content, or “File” and drop the file.
- 2MD5, SHA-1, SHA-256, SHA-384, SHA-512 and CRC32 hashes appear instantly.
- 3Switch to uppercase or Base64 if needed, or enable HMAC with a key.
- 4Paste the official checksum into “Compare with a hash” to verify the download.
Use cases
- Verify the integrity of ISOs, installers and downloads.
- Generate HMAC signatures to test webhooks and APIs.
- Detect duplicate files by comparing their hashes.
- Compute CRC32 checksums for ZIP, PNG or network protocols.
Frequently asked questions
Which hash algorithm should I use?
For integrity and security, SHA-256 or SHA-512. MD5 and SHA-1 are broken against deliberate collisions: fine for spotting accidental errors or duplicates, not for security. CRC32 is just a fast checksum.
Are my files uploaded?
No. The file is read and processed locally in your browser, inside a Web Worker so the page never freezes. It even works offline.
Can a hash be “decrypted”?
No. A hash is a one-way function and cannot be reversed. Sites that claim to “decrypt MD5” just look the value up in tables of hashes of common passwords.
What is HMAC?
A keyed hash proving the message was produced by someone who knows the secret key. It is what Stripe, GitHub and Shopify use to sign their webhooks.
Can I use it to store passwords?
Not directly: for passwords use slow, salted algorithms such as bcrypt, scrypt or Argon2. A plain SHA-256 is too fast and vulnerable to brute force.