InTab

Hash Generator

MD5, SHA-1, SHA-2, SHA-3, BLAKE, CRC32, xxHash and HMAC for text or files.

Crypto & Generators: Hashes, secrets and random data. It runs in your browser, so nothing you enter is uploaded.

What it does

The Hash Generator computes checksums and digests of text or files with MD5, SHA-1, SHA-2 (224/256/384/512), SHA-3, Keccak-256, RIPEMD-160, BLAKE2b, BLAKE2s, BLAKE3, CRC32, CRC64, Adler-32, xxHash and Whirlpool, all at once. Add a secret to get HMAC values, and paste a hash to find which algorithm produced it.

How to use it

  1. Choose Text and type, or File and pick a file of any size.
  2. Read the digests. Choose hex (lowercase), HEX (uppercase) or Base64 output.
  3. Optionally enter an HMAC secret key to get keyed hashes.
  4. To check a download, paste the published checksum into Verify a hash: the matching algorithm is highlighted.

Example

Algorithm hello
MD5 5d41402abc4b2a76b9719d911017c592
SHA-256 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824
HMAC-SHA256, key secret 88aab3ede8d3adf94d26ab90d3bafd4a2083070c3bcce9c014ee04a443847c0b

Good to know

  • MD5 and SHA-1 are broken for security. They are still fine for spotting accidental changes, but use SHA-256 or better for signatures and integrity checks that matter.
  • Never store passwords with these hashes. They are designed to be fast, which helps attackers. Use the Password Hasher instead.
  • CRC32, Adler-32 and xxHash are non-cryptographic: very fast, for detecting errors, not tampering.
  • Text is hashed as UTF-8, and a trailing newline changes the result.

FAQ

Why does my hash differ from the command line? Usually because of a newline: echo hello | sha256sum hashes hello plus a newline. Use echo -n or printf.

Are large files uploaded? No. Files are read and hashed in your browser. Very large files (several gigabytes) can be more than a browser tab's memory allows.

Guides

More Crypto & Generators tools

  • PASETO Tokens: Create and verify PASETO v4 tokens: v4.local (encrypted) and v4.public (Ed25519 signed).
  • Encrypt / Decrypt: AES-GCM, CBC and CTR text encryption with a password (PBKDF2) or a raw key.
  • Password Hasher: Hash and verify passwords with Argon2id, bcrypt, scrypt or PBKDF2 (OWASP defaults).
  • Bcrypt: Hash passwords with bcrypt and verify hashes.
  • Password Generator: Generate strong random passwords, passphrases and PINs.
  • UUID Generator: Generate UUID v4 / v7 in bulk and inspect UUIDs.
  • Lorem Ipsum: Generate placeholder paragraphs, sentences or words.