Hash Generator — SHA-256, SHA-512, SHA-1 & HMAC Online
Create cryptographic hash values with our versatile Hash Generator. The tool supports the SHA family provided by the Web Crypto API: SHA-1, SHA-256, SHA-384 and SHA-512 (MD5 is not offered because browsers do not implement it). Generate hashes from text or files, and create HMAC signatures with custom keys. Live mode enables real-time hashing during input, and the hash comparison feature helps verify file integrity.
Web Crypto API Client-Side Only
Related tools
- Lorem Ipsum Generator Generate Lorem Ipsum placeholder text with customizable paragraphs, sentences and words. Combine types freely and copy with one click for mockups and layouts.
- QR Code Generator Create custom QR codes. QR code generator supporting URLs, text, WiFi, vCard with SVG/PNG download, color customization and error correction.
- UUID Generator Generate v1, v4, v7 and NIL UUIDs using cryptographically secure random numbers. Bulk generation with multiple output formats for databases and APIs.
- Password Generator Create strong, random passwords with customizable length and character sets. Passphrases, pronounceable patterns, strength meter and bulk generation.
Features
- Multiple hash algorithms: SHA-1, SHA-256, SHA-384, SHA-512
- Hash text and files
- Compare hashes for verification
- HMAC support with custom keys
- Uppercase and lowercase output options
- Copy hashes with one click
- Real-time hash generation
- 100% client-side processing - your data never leaves your browser
Security Considerations
- Use SHA-256 or higher: SHA-1 is cryptographically broken and MD5 is not offered at all
- Don't use plain hashes for passwords: Use bcrypt, scrypt, or PBKDF2 instead
- Add salts for password hashing: Prevent rainbow table attacks
- Verify hash integrity: Always compare full hash values, not truncated versions
- Use HMAC for authentication: Provides both integrity and authenticity
Common Use Cases
- File Integrity Verification: Verify downloads haven't been tampered with
- Content Fingerprinting: Detect changes in files, API responses or build artifacts
- Data Deduplication: Identify duplicate files or content
- Checksum Generation: Create checksums for data validation
- Digital Signatures: Component of cryptographic signature systems
- API Authentication: Generate HMAC signatures for API requests
Hash Algorithm Selection
- SHA-1: Deprecated for security use (160-bit, collision attacks exist)
- SHA-256: Industry standard for security applications (256-bit, secure)
- SHA-384: High security variant (384-bit, very secure)
- SHA-512: Maximum security variant (512-bit, very secure)
Useful Resources
NIST Cryptographic Hash Functions Official NIST documentation and standards for hash algorithms
Secure Hash Algorithms (SHA) - Wikipedia Comprehensive overview of SHA family algorithms and their security
MDN SubtleCrypto.digest() Browser API documentation for generating cryptographic digests
OWASP Password Storage Cheat Sheet Security best practices for password hashing and storage