Chris Collins

Tools · crypto

Hashes and checksums

MD5, SHA-1, SHA-2, SHA-3, CRC-32, Adler-32, and xxHash for text or files of any size, plus HMAC and PBKDF2 — with hash comparison.

Added

How to use it

Text hashes what you type as you type it. Switch the input to Hex bytes or Base64 bytes to hash raw binary instead of UTF-8 text.

File hashes a dropped or chosen file locally, in 4 MB chunks with a progress bar, so multi-gigabyte files work. Nothing is uploaded. Change the selected algorithms and the file is re-hashed.

Compare: paste an expected value (hex in any case, with or without spaces or colons, or Base64) under the results and the matching algorithm is highlighted — handy for checking a download against a published SHA-256.

HMAC signs a message with a key using any of the SHA or MD5 algorithms; the key can be text, hex, or Base64. PBKDF2 derives a key from a password and salt with the browser’s WebCrypto.

Choose the algorithms and the output format (hex, upper-case hex, Base64, Base64URL) at the top. MD5 and SHA-1 are broken for collision resistance: fine as checksums, not for signatures. CRC-32, Adler-32, and xxHash are fast non-cryptographic checksums.

Sharing

Share link copies a URL that opens this tool exactly as you have it. Hand-written links work too: ?text=…&algos=sha256,md5&fmt=base64 (fmt: hex, HEX, base64, base64url). HMAC shares only the message (?msg=…) and PBKDF2 only its parameters (?prf=SHA-256&iter=600000&len=32&salt=…) — keys and passwords never go into a link. For example ?text=hello&algos=sha256.

Runs entirely in your browser; nothing you type leaves this page.