A hash is a fixed-length fingerprint computed from any input. The same input always produces the same hash, but the hash cannot be reversed back into the original data. Hashes are used to verify file integrity, store passwords safely, and sign messages.

How do I verify a file's checksum?

Switch to File mode and drop the downloaded file in. The tool computes its SHA-256 (and other) hashes locally, so you can compare the result against the checksum published by the file's author. If they match, the file is intact and untampered. The file is read in your browser and never uploaded.

Is your SHA-3 the real SHA-3 or Keccak?

It is the real, standardized FIPS-202 SHA3-256, which uses different padding from the original Keccak submission. Some hash tools built on older libraries actually output Keccak-256 while labelling it SHA-3 — this tool does not. SHA3-256 of the text 'abc' here is 3a985da74fe225b2045c172d6bd390bd855f086e3e9d525b46bfe24511431532, which matches the NIST test vector.

Is MD5 or SHA-1 still safe to use?

No, not for security. Both MD5 and SHA-1 are broken — attackers can manufacture collisions — so never use them for passwords, signatures or certificates. They remain fine for non-security uses like checksums, cache keys and deduplication. For security, use SHA-256, SHA-512, SHA3-256 or an HMAC.

Is it safe to hash sensitive text or files here?

Yes. Hashing runs entirely in your browser — SHA-1, SHA-256 and SHA-512 use the native Web Crypto API, while MD5, RIPEMD-160 and SHA3-256 use vetted JavaScript libraries. Your text, files and keys never leave your device and nothing is stored on any server.

Hash Generator

MD5, SHA-1, SHA-256, SHA-512, SHA3-256, RIPEMD-160 & HMAC — for text or files

100% Private — your data never leaves your device

Your text and files are hashed entirely in your browser — they are never uploaded, logged, or stored anywhere.

Input text

Output

UPPERCASE hex HMAC (keyed)

Which algorithm should I use?

SHA-256 / SHA-512 / SHA3-256: secure modern hashes — use these for integrity and signatures.
HMAC: a keyed hash — proves a message came from someone who knows the secret key.
MD5 / SHA-1: fast but cryptographically broken — checksums only, never for security.
RIPEMD-160: 160-bit hash used in Bitcoin addresses.