fjordtools / Security / Hash & HMAC
Hash Generator: MD5, SHA-256, SHA-512 and HMAC
Hash text or a file with MD5, SHA-1, SHA-256, SHA-384 and SHA-512, add an HMAC key, and compare against an expected checksum. Runs in your browser.
About Hash & HMAChow it works and good to know
What each one is for
SHA-256 and SHA-512 are the safe choices for checksums and integrity checks. SHA-1 and MD5 are broken for security (collisions can be made on purpose), but they are still everywhere as file checksums and cache keys, so they are here too.
HMAC
Type a key to get an HMAC (RFC 2104) instead of a plain hash. It proves a message was made by someone who knows the key, which is how webhook signatures and many API signatures work. Any key length works, including none.
Check a download
Use Hash a file to compute a file's checksums, then paste the checksum the publisher gave you into Compare with. It accepts hex in any case (spaces, colons and a 0x prefix are ignored) or Base64, and tells you which algorithm matches.
Privacy
Hashing uses your browser's built-in crypto.subtle (and a small MD5 written for this page, since browsers have none). Text, keys and files stay in your browser; nothing is uploaded. Files up to 256 MB are supported.
Related tools
- JWT DecoderRead the header, payload and expiry of a JSON Web Token.
- Base64Encode and decode text, with URL-safe and UTF-8 support.
- UUID & ULIDGenerate UUID v4, v7 and ULID, and read the time inside any ID.
- Password GeneratorRandom passwords, hex and base64url secrets, with entropy shown.
- JSON FormatterFormat, validate, minify and sort JSON.
- URL EncoderPercent-encode, decode and take apart URLs and query strings.