0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0
Configuration
Generates a hash of a text using different algorithms: SHA-256, SHA-512, MD5, BLAKE2b, RIPEMD-160, and more. Select the algorithm and enter the text in the input field. The hash is recalculated automatically as you type. Algorithms marked with ⚠ are cryptographically weak; avoid them in new systems.

SHA-256. A 256-bit summary function belonging to the SHA-2 family. Recommended for general use.

Entrance

How it works

A hash function turns any text or file into a fixed-length fingerprint. The process is one-way: the original content cannot be reconstructed from the hash, and the same data always produces the same result.

Choose the algorithm, enter text or upload a file, and the hash is computed instantly in your browser. The result can be shown in hexadecimal or Base64.

Some algorithms accept a key (HMAC) or derive keys from a password with salt and iterations (PBKDF2, Argon2id), designed to store passwords securely.

Examples

helloSHA-256 · 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824
helloMD5 · 5d41402abc4b2a76b9719d911017c592
helloSHA-1 · aaf4c61ddcc5e8a2dabede0f3b482cd9aea9434dMD5 and SHA-1 serve as fast checksums, but are not secure: do not use them in cryptographic contexts.

Use cases

  • Verify that a downloaded file was not corrupted or altered, by comparing its hash with the one published by the author.
  • Detect changes between two texts or files: if the hash differs, the content differs.
  • Generate stable identifiers from content, for example for caching or deduplication.
  • Compute an HMAC to sign messages and validate their integrity with a shared key.

Frequently asked questions

Can a hash be reversed to recover the original text?

No. Hash functions are one-way by design. What exist are brute-force attacks or precomputed tables that try known inputs; that is why passwords are protected with salt and iterations.

Which algorithm should I use?

For general integrity, SHA-256 is the recommended standard. For passwords, use a key derivation function like Argon2id or PBKDF2 with salt. Avoid MD5 and SHA-1 for security uses.

Why are MD5 and SHA-1 considered insecure?

They have known practical collisions: it is possible to generate two different inputs with the same hash. They are still useful as checksums, but not for signatures or security.

What is the difference between a hash and an HMAC?

A plain hash depends only on the content; an HMAC combines the content with a secret key, so only someone who knows the key can generate or validate the result.

Is my text or file sent to a server?

No. All computation happens locally in your browser; the content never leaves your device.

What is salt and what is it for?

It is a random value added to the input before computing the hash. It makes the same password produce different hashes and neutralizes precomputed tables.