Skip to content
JustTools

Hash Generator

Hash text or files of any size with 17 algorithms at once, make HMAC signatures, hash a list line by line and check a download against its published checksum — all in your browser.

Runs in your browser Free · no sign-up

At a glance

  • 17 algorithms: MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA3-256, SHA3-512, Keccak-256, BLAKE2b, BLAKE3, RIPEMD-160, CRC32, CRC32C, Adler-32, xxHash64 and XXH3.
  • Files of any size are read in 2 MB pieces and hashed with every chosen algorithm in one pass, with progress and speed shown.
  • HMAC with a secret key (text, hex or Base64) for API and webhook signatures, e.g. HMAC-SHA256.
  • Compare with a hash you were given — hex, Base64, sha256=… or SRI format — or paste a whole SHA256SUMS list to check several files by name.
  • Each line mode hashes a list one value at a time (with optional trimming and lowercasing, as ad platforms require for emails) and exports a CSV.
  • Output as lowercase hex, uppercase hex or Base64; text input as UTF-8, hex or Base64 bytes.
  • Runs entirely in your browser with WebAssembly — nothing you hash is uploaded. Results are checked against the published test vectors.

Step by step

How to generate a hash

  1. 1

    Choose what to hash

    Pick Text, Each line or Files, and select the algorithms you need.

  2. 2

    Add your data

    Type or paste text, or drop one or more files. Turn on HMAC and enter a key for a keyed hash.

  3. 3

    Copy the result

    Hashes appear instantly. Choose hex, HEX or Base64 and click the copy button next to any hash.

  4. 4

    Verify (optional)

    Paste the expected hash or checksum list into Compare with a hash to see whether it matches.

Features

Everything you need, nothing you don’t

Verify downloads

Drop an ISO, installer or APK and paste the checksum from the download page — the tool tells you instantly whether it matches.

Many algorithms at once

See MD5, SHA-1, SHA-256 and SHA-512 side by side, or add SHA-3, BLAKE3 and checksums — the file is read only once.

Webhook signatures

Recreate the HMAC-SHA256 of a payload with your secret to debug Razorpay, Stripe, GitHub or Shopify webhooks.

Hash a list

Normalise and hash a column of emails or phone numbers line by line, then download value and hash as CSV.

Find the algorithm

No match? The tool suggests which algorithms produce a hash of that length and adds them with one click.

Private

Passwords, keys and files never leave your device. No upload, no sign-up and no size limit.

Which hash should I use?

UseAlgorithm
Checking a download, file integritySHA-256 (or whatever the publisher lists)
API / webhook signaturesHMAC-SHA256
Ethereum addresses and signaturesKeccak-256 (not SHA3-256)
Fast deduplication or cache keysBLAKE3, xxHash64 or XXH3
ZIP, PNG and gzip checksumsCRC32
Old systems that only accept itMD5 or SHA-1 — never for security
Storing passwordsNone of these — use bcrypt, scrypt or Argon2 with a salt

Checking a file from the command line

To compare with what this tool shows: on Windows run certutil -hashfile file.iso SHA256 (or Get-FileHash file.iso in PowerShell), on macOS shasum -a 256 file.iso, and on Linux sha256sum file.iso.

Hashing text in a terminal? echo "hello" | sha256sum includes a line break at the end — use echo -n (or printf) to match the tool, which hashes exactly what is in the box.

FAQ

Frequently asked questions

How do I generate a SHA-256 hash?

Type or paste your text into the box — the SHA-256 hash appears instantly along with MD5, SHA-1 and SHA-512. For a file, choose Files and drop it in.

How do I verify a file’s checksum?

Choose Files, drop the file, and paste the checksum from the download page into Compare with a hash. A green “Match” means the file is exactly what the publisher released.

Why doesn’t my hash match?

Hashes change with every byte. The usual causes are a trailing space or line break, different text encoding, uppercase vs lowercase input, or the wrong algorithm. The tool warns about trailing spaces and suggests algorithms that match the length of your hash.

Can I reverse or decrypt a hash?

No. Hashes are one-way: you can’t get the original text back. Sites that “decrypt” MD5 only look the hash up in tables of common passwords.

Is MD5 still safe to use?

Not for security — collisions can be made deliberately. It is fine for spotting accidental corruption or where a system requires it. Use SHA-256 or newer for anything security-related.

Is there a file size limit?

No. Files are read in small pieces, so even multi-gigabyte files work; the speed depends on your device.

Is my data uploaded?

No. All hashing happens in your browser with WebAssembly. Your text, files and secret keys never leave your device.

Keep going

Browse every tool

Last updated Report a problem or suggest a feature