Hash Generator

Compute cryptographic and checksum digests from text or files. SHA-1/2 and HMAC use the browser's Web Crypto API; MD5, SHA-3 and CRC32 run in pure JavaScript. Everything stays on your machine — files are read locally and never uploaded.

Input
{{byteLen}} bytes · {{text.length}} chars
Digestslive
{{h.name}} {{ h.value ? cased(h.value) : '—' }} {{h.bits}}b
Compare against a known hash
{{ compareMatch ? 'Matches '+compareMatch : 'No match among the digests above' }}
HMACkeyed hash
HMAC {{ hmacValue ? cased(hmacValue) : '—' }}

Enter a secret key to compute an HMAC over the input above.

File hashlocal only
{{h.name}} {{cased(h.value)}}
About this toolstrengths & caveats

MD5 and SHA-1 are broken for collision resistance — fine as non-security checksums, unsafe for signatures or deduplication of untrusted data.

SHA-256 / SHA-384 / SHA-512 are the SHA-2 family and remain the practical default for integrity and fingerprints.

SHA-3 (Keccak) uses a different internal construction from SHA-2, giving a hedge against structural attacks on SHA-2.

CRC32 is an error-detection checksum, not a cryptographic hash — trivial to forge but great for catching accidental corruption.

HMAC combines a hash with a secret key to prove a message came from someone who holds that key.

All hashing happens locally. Nothing you enter or drop here is transmitted, logged, or stored.