Generate MD5, SHA-1, SHA-256, and SHA-512 hashes from text or files instantly, then compare checksums to verify data integrity and detect tampering.
Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes and verify file checksums online. Compare downloaded files against vendor expected hashes securely in your browser.
A cryptographic hash function converts input data of any size into a fixed-length output string (the digest). Hash functions are one-way (irreversible), deterministic (same input always produces identical output), and collision-resistant.
MD5 (128-bit) and SHA-1 (160-bit) are legacy algorithms now vulnerable to collision attacks. Modern secure applications rely on SHA-256 (256-bit) and SHA-512 (512-bit) from the SHA-2 family for software downloads, digital signatures, and password hashing.
When downloading software installers or Linux ISOs, software vendors publish expected SHA-256 checksums. Computing your downloaded file's checksum verifies that the file was not corrupted during transit or tampered with by malicious actors.
HMAC combines a cryptographic hash function with a secret key to verify both data integrity and authenticity. HMAC is widely used in API request signing (e.g. AWS Signature V4, Stripe Webhooks, OAuth 2.0).
Our engine uses the Web Crypto API (crypto.subtle.digest) and HTML5 FileReader APIs to compute text hashes and streaming multi-gigabyte file checksums 100% inside your browser. Zero bytes or secret keys leave your device.
Hashes are raw binary byte arrays that are commonly formatted into readable representations: Hexadecimal (lowercase/UPPERCASE base16 string) or Base64 (base64 encoded string).
Quick answers about how this tool works.
Plain-language explainers that sit next to this tool.
Base64 is not encryption. A hash cannot be reversed to recover a password. Mixing up hashing, encoding, and encryption is one of the most common — and most dangerous — mistakes in application security.
Cached input tokens bill at a tenth of the standard rate. Here is exactly what gets cached, the 1,024-token minimum, why writes cost 1.25x, and the prompt-ordering mistakes that silently destroy your hit rate.
Understand password security: Learn how GPU hash cracking tools (Hashcat) execute dictionary, rule-based, and brute-force attacks against weak hashes.
MD5 is fast but cryptographically broken; SHA-256 is slower but still secure. Here is exactly how each algorithm works, where MD5 fails, and which one to use for your use case.
Search 244+ free tools by name, or pick a category below. Every one runs instantly in your browser — no signup, nothing to install.
Tap a star to rate us instantly.
