Free tool · text and files
Hash generator for text and files
Type text or drop a file to see its MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes at once. Paste the checksum from a download page to confirm the file is exactly what the publisher released, or turn on HMAC to check an API or webhook signature. Hashing happens in your browser, so even files of hundreds of MB never leave your device.
How to use the tool
- 1
Choose text or file
Type or paste text for instant hashes, or switch to File and drop any file up to 500 MB.
- 2
Read the hashes
All five appear together. Switch between hex and Base64, and copy any one with a tap.
- 3
Compare a checksum
Paste the expected hash from a website. The tool tells you which algorithm matches, or that none does.
- 4
Use HMAC if you have a key
Tick HMAC and enter the secret key to get HMAC-SHA-256, 384 and 512, as used by payment and webhook APIs.
QRScanKaro
Sharing files with customers?
Put a PDF menu, brochure or price list behind one QR code and update it anytime without reprinting.
Try PDF to QR →Frequently asked questions
Can a hash be decrypted back to the text?
No. A hash is a one-way fingerprint, not encryption: there is no key and no way to reverse it. Sites that claim to “decrypt” MD5 just look the hash up in a big list of common words, which is why short, common passwords are unsafe.
Which hash should I use?
SHA-256 for almost everything: file checksums, integrity checks and fingerprints. SHA-512 is equally safe. MD5 and SHA-1 are broken, because people can make two different files with the same hash, so use them only to match an old checksum a website still publishes.
Should I store passwords as SHA-256 hashes?
No. Plain hashes are too fast, so attackers can test billions of guesses a second. Use a slow password hash made for the job, such as Argon2, bcrypt or scrypt, with a unique salt for each user.
Why is my hash different from another tool’s?
The input is almost always different. A trailing newline is the usual cause: echo "abc" | sha256sum hashes “abc” plus a line break, while this tool hashes exactly what you typed. Use echo -n or printf. Text here is hashed as UTF-8.
Is my file uploaded to calculate the hash?
No. Your browser reads the file and hashes it on your device with the Web Crypto API (and our own MD5 code), so large or private files never leave your computer or phone.
More free tools
Text Encryption & Decryption
Lock any message with a password using AES-256-GCM, then share it on WhatsApp or email.
RSA Encryption & Decryption
Generate RSA key pairs (2048 or 4096-bit PEM), encrypt text with a public key and decrypt with the private key.
Base64, URL & Hex Encoder
Encode and decode Base64, URL, hex, binary, HTML entities and \u escapes as you type.
Cipher Tools
Encode and decode Caesar, ROT13, ROT47, Vigenère, Atbash, Affine, Rail Fence, Morse, A1Z26 and Bacon ciphers.