Base64 Encoder / Decoder
Encodes and decodes Base64 for text and files.
Hash Generator
Get the MD5, SHA-1, SHA-256, SHA-384, or SHA-512 hash of any text or file. The hash generator can also compare the result with a checksum from a download page.
Hashed in your browser. Your text is not uploaded.
Hashed as UTF-8. A trailing space or line break changes the hash.
How to use the Hash Generator
- Type text in the Text tab, or choose a file up to 200 MB in the File tab.
- Tick the Algorithms you need and pick the Output format. To verify a download, paste the expected hash into Compare with.
- Press Generate. Each algorithm gets its own row with a copy button, and a match or no-match badge when you are comparing.
How it works
A hash function turns any input into a fixed-length value. The same input always gives the same hash, and changing a single character gives a completely different one.
- Text is hashed as UTF-8 bytes.
- SHA-1, SHA-256, SHA-384, and SHA-512 use the browser's Web Crypto API (
crypto.subtle.digest). - MD5 uses a small audited library, because Web Crypto has no MD5.
- Files are read in chunks and fed to an incremental hasher, so a large file never has to fit in memory at once.
- The comparison ignores letter case and spaces around the pasted hash.
Examples
The text hello:
- MD5 =
5d41402abc4b2a76b9719d911017c592 - SHA-1 =
aaf4c61ddcc5e8a2dabede0f3b482cd9aea9434d - SHA-256 =
2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824 - SHA-256 in Base64 =
LPJNul+wow4m6DsqxbninhsWHlwfp0JecwQzYpOLmCQ=
An empty string has the SHA-256 hash e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.
Hash algorithms compared
| Algorithm | Output size | Hex length | Status |
|---|---|---|---|
| MD5 | 128 bits | 32 | Broken, checksums only |
| SHA-1 | 160 bits | 40 | Broken, checksums only |
| SHA-256 | 256 bits | 64 | Secure |
| SHA-384 | 384 bits | 96 | Secure |
| SHA-512 | 512 bits | 128 | Secure |
You can often tell which algorithm produced a checksum from its length alone. A 64-character hex string on a download page is almost always SHA-256.
Limitations
- A trailing newline changes the hash. It is the most common reason a hash doesn't match, so check for an extra line break at the end of your text.
- MD5 and SHA-1 are not secure for passwords or signatures. Use them for checksums only.
- Password hashing (bcrypt, Argon2) and HMAC are not supported.
- Files are limited to 200 MB.
Frequently asked questions
What is a hash?
A fixed-length fingerprint of data. Changing even one character of the input produces a completely different hash.
Can a hash be reversed?
No. Hash functions are one-way. You can only check whether some input produces the same hash.
Which algorithm should I use?
Use SHA-256 for checksums and integrity checks. MD5 and SHA-1 are still used for older checksums but are broken for security purposes.
How do I verify a downloaded file?
Open the File tab, choose the file, and paste the checksum from the download page into "Compare with". A match means the file is identical to the original.
Is my file uploaded?
No. The hash is calculated in your browser.
Related tools
Often used together with the Hash Generator.
UUID Generator
Generates random v4 and time-ordered v7 UUIDs.
URL Encoder / Decoder
Percent-encodes and decodes text for URLs.