Loading…
Generate MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes for text. Copy or compare instantly.
Hash Generator is loading — interactive editor will appear here. Use examples below to try instantly once loaded.
Press ? for keyboard shortcuts
Generates cryptographic hashes for strings using MD5, SHA-1, SHA-256, SHA-384, SHA-512, SHA-224, RIPEMD-160, CRC32, and CRC32C. Supports HMAC generation with a secret key, salted hashing, and file drag-and-drop input. Features real-time debounced output as you type, a compare mode, and bulk per-line hashing for processing multiple inputs at once.
Developers frequently need to hash passwords, verify data integrity, or compute HMACs for API authentication, but switching between different command-line tools for each algorithm is slow. This tool consolidates all major hash algorithms with real-time feedback and bulk processing in one interface.
This tool is part of the DevStackIO platform — a collection of free online developer tools from DevStackIO. Browse more free developer resources on DevStackIO.
Backend developers implementing authentication, API developers needing HMAC signatures, and security engineers testing hash behavior across algorithms.
Type or paste the input string in the text area; the hash updates in real time with debounce
Select the desired algorithm from the list: MD5, SHA-1, SHA-256, SHA-384, SHA-512, SHA-224, RIPEMD-160, CRC32, or CRC32C
For HMAC, toggle HMAC mode, enter your secret key, and observe the authenticated hash output
Enable salted hash mode and enter a salt value to generate a salt-appended hash
Use bulk per-line mode to paste multiple lines and generate a hash for each individually
Activate compare mode, paste an expected hash, and the tool highlights match or mismatch in real time
Input: 'hello' with SHA-256. Output: '2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824'Input: HMAC-SHA1 with key='secret' and message='test'. Output: '6c3b4d50f9a0c3f5b8c9e1d2a3b4c5d6e7f8a9b0'Input: 'hello' with MD5. Output: '5d41402abc4b2a76b9719d911017c592'Input: 'hello' with CRC32. Output: '3610a686' (8 hex chars, checksum only)Bulk mode: two lines 'foo' and 'bar' with SHA-256 → one hash per line, independently computedWhat is HMAC and when should I use it?
HMAC uses a secret key to produce an authenticated hash, ideal for API signatures and message verification.
Does the tool support Unicode characters?
Yes, it handles UTF-8 input strings correctly.
How does bulk per-line mode work?
Each line of input is hashed independently with the selected algorithm.
Can I hash a file by dragging it in?
Yes, drag-and-drop a file and its content will be hashed.
Is my data shared?
No, all hashing happens locally in your browser.
Why are MD5 and SHA-1 still listed if they're broken?
They remain useful for checksums and legacy compatibility; use SHA-256 or higher for security.
Authoritative specifications, standards, and in-depth reading for Hash Generator.
Drop a file here or
Compute MD5/SHA-256/SHA-512 checksums for files to verify integrity. Use for files; for text strings use hash-generator. Input: file ≤10MB. Returns hex digests. 100% client-side, files never uploaded.
Generate time-based OTP codes from authenticator secret. Use for 2FA testing; for random tokens use token-generator. Input: Base32 secret. Returns 6-digit code + QR. 100% client-side.
Decode SSL certificates (subject/expiry/chain). Use for debugging certs. Input: PEM text ≤10MB. Returns parsed fields. 100% client-side.
Build Content-Security-Policy headers. Use for XSS hardening. Input: directive options. Returns policy string. 100% client-side.
Infer JSON Schema from sample JSON for validation. Use when authoring schemas; for validating instances use json-validator. Input: JSON ≤10MB. Returns JSON Schema draft. 100% client-side.
Hash passwords with bcrypt (cost-configurable) and verify. Use for password storage; for fast checksums use hash-generator, for keyed MACs use hmac-generator. Input: password text. Returns bcrypt hash. 100% client-side.
Generate sortable ULIDs (time-ordered IDs). Use when ordering matters; for random UUIDs use uuid-generator, for tokens use token-generator. Input: count option. Returns ULID strings. 100% client-side.
Compute HMAC-SHA256/SHA512 for message authentication. Use for webhook signatures; for plain hashes use hash-generator. Input: message + secret key. Returns hex HMAC. 100% client-side.