Hash Generator

Yes, completely free. No signup or account required.

All hashing is computed entirely in your browser using the Web Crypto API and pure JavaScript. No data is uploaded anywhere.

SHA-1, SHA-256, SHA-512, MD5, HMAC (with SHA-256), and CRC32.

A hash function takes any input and produces a fixed-length output called a digest or checksum. The same input always produces the same output, but even a tiny change in input produces a completely different hash.

SHA-256 produces a 256-bit hash and is cryptographically secure. MD5 produces a 128-bit hash and has known collision vulnerabilities, making it unsuitable for security purposes but still useful for checksums.

HMAC (Hash-based Message Authentication Code) combines a hash function with a secret key to verify both data integrity and authenticity. It confirms that a message was created by someone who knows the key.

Hash the file content with the same algorithm used to generate the checksum (e.g. SHA-256), then compare the two hex strings. If they match, the file is intact.

No. Hash functions are one-way — you cannot derive the original input from the digest. This is a fundamental property called preimage resistance.

A collision occurs when two different inputs produce the same hash output. MD5 and SHA-1 have demonstrated collision attacks, which is why SHA-256 or SHA-512 are preferred for security-critical use.

CRC32 is a fast checksum used to detect accidental data corruption in file transfers, network packets, and storage. It is not cryptographic — it should not be used for security purposes.

SHA-512 is the 512-bit variant of the SHA-2 family. It produces a 128-character hex digest. It offers a larger security margin than SHA-256 and can be faster on 64-bit processors.