Hash Generator (SHA)
Create a fingerprint of a string, check a webhook HMAC signature or compare values without revealing them. Hashes are calculated with the browser’s built-in, audited Web Crypto implementation.
Runs entirely in your browser. Your input and files are not uploaded to any server.
How to use
- Type or paste the text. It is encoded as UTF-8.
- Optionally enter an HMAC secret key.
- All SHA variants are calculated as you type. Choose hex or Base64 and copy the one you need.
Examples
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Paste the raw request body and the shared secret to compute the HMAC-SHA256 to compare with the header value.
Privacy
Runs entirely in your browser. Your input and files are not uploaded to any server. See the privacy policy for what is stored in your browser (favorites and history only). Privacy policy
Check it yourself: open your browser’s developer tools, select the Network tab and use the tool. Your file never appears in an upload request. Once this page is saved for offline use, you can also disconnect from the internet and keep working. Ads and anonymous visit statistics, when enabled, make their own requests, but they never receive your files or text.
Frequently asked questions
Why is MD5 not offered?
MD5 is broken for security purposes and is not part of the Web Crypto API. Prefer SHA-256. If you need MD5 only to match a legacy checksum, use a dedicated offline tool.
Should I hash passwords with SHA-256?
No. Passwords should be stored with slow, salted algorithms such as Argon2, bcrypt or scrypt on the server. Plain SHA hashes are too fast.