What it does
Type text or drop a file and every common digest is shown at once: MD5, SHA-1, SHA-256, SHA-384, SHA-512 and CRC-32. There is no algorithm to pick first and no button to press; the table updates as you type.
- File checksums: drop a file (up to 1 GB) to get its hashes, then paste the checksum from the download page into Compare with expected hash. The matching algorithm is highlighted, so you do not need to know which one the publisher used. Pasted values may be hex in any case, Base64, colon-separated, or a line copied from
sha256sumor BSDshasumoutput. - HMAC mode: sign text with a secret key, for example to check a webhook signature. The key can be UTF-8 text, hex or Base64. CRC-32 is hidden in this mode because it is not a keyed hash.
- Output as lowercase hex, uppercase hex or Base64. Copy a single value, copy all, or download them as a text file.
Text is encoded as UTF-8 before hashing, which matches what most programming languages do by default.
MD5 and SHA-1 are marked legacy: they are fine for detecting accidental corruption, but should not be used for passwords or signatures. For passwords, use a dedicated algorithm such as Argon2, scrypt or PBKDF2.
Privacy
Hashing happens in your browser using the Web Crypto API (MD5 and CRC-32 are computed by this page’s own code). Files are read locally and never uploaded. The HMAC key is never saved.