Try
Hashing…
The empty string.
About this tool
- Runs in
- your browser
- Your input sent to our servers
- Nothing
- Kept on this device
- nothing
More in the privacy policy.
How to use it
- 01Type or paste text, or open or drop a file. Or pick one under Try.
- 02Read the SHA-256, SHA-384, SHA-512, SHA-1 and MD5 hashes, and switch between hex, uppercase hex and Base64.
- 03For an HMAC, enter a key under HMAC key (as text, or tick Key is hex); every hash becomes its HMAC.
- 04To check a download, paste its published checksum (or its sha256sum line) under Check against a checksum; the tool says which hash matches.
Related tools
Questions
Which hash should I use?
SHA-256 for checksums and most new uses. SHA-1 and MD5 are broken for collisions (two different inputs can be made to share a hash), so use them only to match a checksum an older system publishes.
Why doesn't my hash match the one from the terminal?
Usually a trailing newline: echo adds one. The SHA-256 of hello is 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824; of hello followed by a newline it's 5891b5b522d5df086d0ff0b110fbd9d21bb4fc7163af34d08286a2e846f6be03. Line endings (\n or \r\n) and text encodings change the hash too. Text typed or pasted here is hashed as UTF-8 with \n line endings (text fields turn \r\n into \n); to hash a file's exact bytes, open the file.
What is an HMAC, and how do I make one?
A hash mixed with a secret key (RFC 2104): only someone with the key can make or check it, so APIs and webhooks use it to sign messages. Enter the key under HMAC key; the HMAC-SHA-256 of hello with the key key is 9307b3b915efb5171ff14d8cb55fbcc798c6c0ef1456d66ded1a6aa723a58b7b. The key is used in this tab only; it isn't sent to our servers or kept.
Can a hash be turned back into the text?
No, a hash can't be reversed. But short or common inputs, such as passwords, can be guessed by hashing candidates, so a plain hash doesn't keep them secret.
Is my file uploaded?
No. Files and text are hashed in this tab, and how large a file can be depends on your device's memory. Nothing is sent to our servers or kept after you leave the page.