Loadingβ¦
Loadingβ¦
Generate MD5, SHA-1, SHA-256, SHA-512, SHA-3, BLAKE, and CRC32 hashes of text as you type, create HMAC signatures, and check a hash for a match.
Also covers: MD5 hash generator Β· SHA-256 hash generator Β· SHA-1 hash Β· SHA-512 hash Β· Hash checker Β· HMAC generator
0 bytes, hashed as UTF-8 exactly as typed (spaces and line breaks count).
Everything runs in your browser β nothing you type or generate is sent anywhere.
Hashes
β¦Broken for security β fine for spotting accidental changesβ¦Broken for security β still used by Git and old checksumsβ¦β¦Hashes update as you type, for every algorithm you select, in hex or Base64.
Copy any hash, paste an expected hash to see which algorithm matches, or turn on HMAC to sign the text with a secret key (as used by webhooks and APIs).
SHA-256 for almost everything: file checks, signatures, and IDs. MD5 and SHA-1 are broken for security (collisions can be crafted) but still used to spot accidental changes. Never use any of these alone to store passwords β use bcrypt, scrypt, or Argon2.
No β a hash is one-way. But short or common inputs can be found by trying guesses, which is why unsalted MD5 or SHA hashes of passwords are unsafe.
Hashes change with every byte: check for a trailing space or line break, and whether the other tool hashes UTF-8 text. Hex case (aβf vs AβF) doesn't matter.
No. Everything is generated and processed in your browser with its built-in cryptography. Nothing you type or generate is uploaded, logged, or stored.
Passwords
Generate strong random passwords in your browser: choose length and character types, skip look-alike characters, and make up to 500 at once.
Passwords
Generate strong, memorable passphrases from the EFF's 7,776-word list, picked with secure randomness. Choose word count, separators, and capitals.
Passwords
Generate random 4, 6, or 8-digit PINs that skip easy guesses like 1234, 1111, years, and dates. Secure randomness, generated in your browser.
Passwords
Check how strong a password really is: estimated crack times, the words and patterns that make it guessable, and tips to improve it. Never leaves your browser.
Keys
Generate random strings, API keys, and secret keys: pick the length and characters (hex, Base64url, alphanumeric, custom) or a key size in bytes. Cryptographically secure.
2FA
Get live 2FA codes from a TOTP secret or otpauth:// link, check a code, or create a new secret with a QR code for authenticator apps. RFC 6238.