Compute cryptographic and checksum digests from text or files. SHA-1/2 and HMAC use the browser's Web Crypto API; MD5, SHA-3 and CRC32 run in pure JavaScript. Everything stays on your machine — files are read locally and never uploaded.
Enter a secret key to compute an HMAC over the input above.
or drop it here — hashed in your browser, never uploaded.
{{file.name}}{{humanSize(file.size)}} · hashing…
MD5 and SHA-1 are broken for collision resistance — fine as non-security checksums, unsafe for signatures or deduplication of untrusted data.
SHA-256 / SHA-384 / SHA-512 are the SHA-2 family and remain the practical default for integrity and fingerprints.
SHA-3 (Keccak) uses a different internal construction from SHA-2, giving a hedge against structural attacks on SHA-2.
CRC32 is an error-detection checksum, not a cryptographic hash — trivial to forge but great for catching accidental corruption.
HMAC combines a hash with a secret key to prove a message came from someone who holds that key.
All hashing happens locally. Nothing you enter or drop here is transmitted, logged, or stored.