Hash Tools
Compute MD5, SHA-1, SHA-256, SHA-512, CRC32, and HMAC checksums, or check a digest against published test vectors. Hashes are not encryption.
12 tools · 100% browser-based · No uploads · No signup
About these Hash tools
Hash tools compute MD5, SHA-1, SHA-256, SHA-512, CRC32, and HMAC in Web Crypto or JS implementations, identify likely hash types, compare digests, checksum files, and convert hex/Base64. The test-vector page only recognizes published RFC/FIPS example strings. It is not a password cracker.
Hashes are one-way fingerprints. They verify integrity and feed HMAC. They are not encryption. MD5 and SHA-1 are broken for collision resistance; do not use them for new security designs. File checksums are still a reasonable way to verify a download matches the published digest.
Tools in this category
Hash Generator
SHA-512 is not password storage. MD5 is not integrity.
MD5 Checksum
Create an MD5 checksum from text or a file. MD5 is fine for accidental corruption checks, not for passwords.
SHA-256 Hash
Generate secure 256-bit SHA-256 hashes from text or files.
SHA-512 Hash
SHA-512 checksum (512-bit). Longer SHA-2 digest than SHA-256. Not a password KDF.
SHA-1 Hash
Create 160-bit SHA-1 hashes, still handy for Git commits and file verification.
CRC32 Checksum
Calculate a CRC32 checksum for quick file-integrity checks.
Hash Identifier
Not sure what a hash is? Detect whether it looks like MD5, SHA-256, bcrypt, or another type.
Compare Hashes
Two hashes can look the same and still differ by one character, and they can look different and still be the same bytes. Eyeballing a 64-character hex string is how a bad ISO ships.
File Checksum
Verify a downloaded file hash against the expected value to confirm integrity.
Hash Test Vectors
Check whether a digest matches published RFC 1321 / FIPS 180 example strings. Not a password cracker.
HMAC Generator
Generate keyed HMAC-SHA256 and HMAC-SHA512 authentication codes.
Hash Converter
Convert a hash between hex and Base64, change its case, or add byte separators.
How these tools run in your browser
Text is encoded as UTF-8 unless you hash a file's raw bytes. Web Crypto provides SHA-256/512 and HMAC where available. MD5/SHA-1/CRC32 use well-known implementations in JS. Identifier uses length and alphabet heuristics. The test-vector checker hashes a handful of published example strings and compares digests. It does not run a password dictionary.
Common Use Cases
- Verify a Linux ISO against the published SHA-256
- Generate HMAC-SHA256 for an API signing test with a throwaway key
- Guess whether a 32-hex string is MD5 vs something else
- Compare two checksums without eyeballing
- Convert a hex digest to Base64 for a header
Common Mistakes
Frequently Asked Questions
Not practically. The test-vector page only recognizes a few published example strings. It will not recover a password. Use a password hashing scheme (Argon2, bcrypt) if you are storing credentials.
No. Use a password hashing scheme (Argon2, bcrypt, scrypt) with salt. See the password storage guide under Security.
Wrong algorithm, text vs binary mode, or a truncated copy. Hash the downloaded file, not a zip of the file, unless the publisher hashed the zip.