Hash Calculator

Compute MD5, SHA-1, SHA-256, SHA-384, SHA-512, HMAC, and file hashes - entirely in your browser.

Examples
Click to load
Hello, World!
password (common hash reference)
JSON payload
Results
Algorithm Hash (hex)
HMAC
File Hash
Drop a file here or click to select
All processing happens locally - file never leaves your browser
File hash results
Algorithm Hash (hex)
Hash Compare
How it works

MD5 (128-bit) - Fast and widely used, but cryptographically broken since 2004. Still useful for checksums and non-security identifiers. Implemented entirely in JavaScript.

SHA-1 (160-bit) - Deprecated for new applications; collision attacks demonstrated in 2017 (SHAttered). Only use for compatibility with legacy systems.

SHA-256 / SHA-384 / SHA-512 - Part of the SHA-2 family. SHA-256 and SHA-512 are the current standard for security applications. Computed via the browser's native WebCrypto API.

HMAC - Hash-based Message Authentication Code. Combines a secret key with your message using a hash function to produce an authentication tag. Used in JWT signing, API authentication, and data integrity verification.

File hashing - The file is read into a binary buffer using the FileReader API. The buffer is passed directly to crypto.subtle.digest(). The file never leaves your device.

Security note: MD5 and SHA-1 are broken for collision resistance. Use SHA-256 or SHA-512 for any security-sensitive application. HMAC output is only as secure as your secret key - use a long, random key.
Send output to…
Tool piping coming in a future phase. Copy the output and paste it into any other tool.
View source of this tool Report issue