ToolAtlas
FavoritesRecent

Hash generator

Processed in this browser

Text limit: 2000000 characters

This tool never uploads your input.

Hash pasted text with MD5, SHA-1, SHA-256, SHA-384, or SHA-512 in this tab. This is not a file hasher, not HMAC, and not a password-storage algorithm. MD5 is for legacy checksums, not logins.

You want the SHA-256 of a string — a token, a commit subject, a config value — without sending it to BeJSON. That is this page.

File SHA-256 owns files. HMAC / password check owns keyed MAC and a local password score. AES encrypt is reversible with a password — a different primitive.

Which digest to pick

  • SHA-256 — default for “does this text match.”
  • SHA-384 / SHA-512 — longer digests, same family.
  • SHA-1 / MD5 — only when a legacy protocol printed that hex.

Rainbow tables and “crack this hash” are not features we will add.

How to use it

  1. Paste the exact string, including whitespace you meant to include.
  2. Copy the hex. Compare case-insensitively if a vendor mixed case.
  3. For a file on disk, leave this page.

Honest limits

  • Encoding is UTF-8 for typed text. A Windows file hash uses bytes.
  • We do not implement HMAC here.
  • Huge pastes are tab-limited.

This is a local utility, not a password vault.

FAQ

Can I hash a downloaded installer?

Use File SHA-256. This page is strings only. Pasting binary as text will not match sha256sum.

Is hashing the same as encryption?

No. You cannot ‘decrypt’ SHA-256. People say ‘MD5 encrypt’ in Chinese toolboxes; they mean hash.

Should I store user passwords as SHA-256?

No. Use a password hash (Argon2, bcrypt, scrypt) with a unique salt on a server. This tool is not that.

Do you offer HMAC?

HMAC-SHA-256 with a key lives on the HMAC / password check page.

Why is MD5 still here?

Legacy checksums and ‘the website printed MD5.’ MD5 is collision-broken for integrity theater. Prefer SHA-256 when you have a choice.

Is the text uploaded?

No. Hashing stays in this tab.

Related tools