Generate MD5, SHA-1/256/512 & SHA-3 hashes — or keyed HMACs — from text or files.
Generate cryptographic hashes from any text or file: MD5, SHA-1, SHA-256, SHA-512, and SHA-3, all at once. Switch to HMAC mode and add a secret key for keyed hashes that prove authenticity. Powered by crypto-js — runs entirely in your browser.
Upload your file using the tool above.
Adjust any settings to your preference.
Click the process button and wait for results.
Download your output using the download button.
SHA-256 for anything security-related — it is the current standard and widely trusted. MD5 and SHA-1 are both cryptographically broken: collisions can be produced deliberately, so they must not be used for signatures or password storage. They remain fine for non-security work like checksums and cache keys.
No. Hashing is one-way by design — the output is a fixed-length fingerprint, not an encoded copy, and the original cannot be recovered from it. What attackers do instead is hash billions of likely inputs and compare, which is why common passwords fall quickly to lookup tables regardless of algorithm.
No. Plain SHA-256 is far too fast, which lets an attacker try billions of guesses per second against a stolen database. Password storage needs a deliberately slow algorithm with a per-user salt — bcrypt, scrypt or Argon2. Our bcrypt generator is the right tool for that job.
Yes, Hash & HMAC Generator is completely free. No signup, no account, and no watermark on outputs. A Pro tier is available for 100 AI ops/day and larger file sizes.
Hash & HMAC Generator runs entirely in your browser. Your file is never uploaded — it is read, processed and saved locally, so it never reaches our servers or anyone else's. You can disconnect from the internet after the page loads and it still works.
What is hashing? A hash function takes input of any size and produces a fixed-length fingerprint. The same input always produces the same hash, but different inputs produce different hashes. Hashes are one-way — you cannot reverse them to get the original input.
Which algorithm to use: Use SHA-256 or SHA-512 for new applications. MD5 and SHA-1 are broken for cryptographic purposes but still used for non-security checksums. SHA-3 is the latest NIST standard.
Use cases: File integrity verification, password storage (with salt), digital signatures, data deduplication, API request signing, and content-addressable storage.