Hash Generator
Paste text or drop a file to get SHA and MD5 digests — hex or Base64, with optional HMAC.
Your data never leaves the browser — no upload, no server.
Input
Options
Output
Computing…
About this tool
SHA-256 and friends run through the Web Crypto API in your browser. MD5 uses a small bundled implementation — fine for checksums and legacy compatibility, but broken for security. MD5 and SHA-1 must not be used for passwords or signatures; for password hashing use bcrypt or argon2 (see the bcrypt cost calculator).
HMAC mode signs the input with your secret key using SHA-1/256/384/512 via crypto.subtle.sign. Draw that key with the secret key generator. Drop a file to hash raw bytes without reading it as text. To check a Stripe or GitHub webhook HMAC, use the webhook signature verifier.
Read more
- Hash passwords with bcrypt in JavaScript
- JSON Web Token (JWT) explained — HMAC SHA-256 signing walkthrough
- How to encode a URL
Free books, courses, and software
Get my programming books, course editions, and complete software.
Get the download library →