nolo
On-deviceYour files

Hash generator

Type or paste text to see its MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes instantly. Add a secret key for HMAC, and paste an expected hash to check that it matches.

  • ๐Ÿ”’ Runs on your device
  • โค’ 0 bytes uploaded
  • ๐Ÿ“ด Works offline
  • โœ“ Free, no sign-up, no watermark
Loading the toolโ€ฆ

How to use Hash Generator

  1. Type or paste your text.
  2. Choose hex, HEX or Base64 output.
  3. Turn on HMAC and enter a key if you need a keyed hash.
  4. Copy a hash, or paste one to compare.

About Hash Generator

SHA hashes are computed with your browser's built-in WebCrypto; MD5 uses the hash-wasm library, which is compiled to WebAssembly and bundled with the page.

Is it private?

Yes. Hash Generator runs entirely in your web browser. What you type is never sent to Nolo or anyone else, and the page cannot send it anywhere: its security policy only allows it to talk to nolotools.com, which has no place to receive data. Nothing is stored either: close the page and it is gone. How Nolo works.

Questions and answers

Is my text sent to a server?

No. Everything runs in your browser and your text never leaves your device. The page is not allowed to talk to any other site, so it is safe to use with real data and secrets.

How is the text hashed?

As UTF-8 bytes, exactly as typed, including spaces and line breaks. A trailing newline changes the hash, which is a common reason for mismatches.

Which hash should I use?

SHA-256 or SHA-512 for anything security related. MD5 and SHA-1 are broken against deliberate collisions and should only be used for checksums or legacy systems.

What is HMAC?

A keyed hash (RFC 2104) that proves a message came from someone who knows the secret key. It is used to sign webhooks and API requests, for example HMAC-SHA256.

Can I hash passwords with this?

Do not store passwords as plain MD5 or SHA hashes; use a slow password hash such as Argon2, bcrypt or scrypt on your server. This tool is for checksums, signatures and testing.

How can I check a result?

The SHA-256 of "abc" is ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad. Press Sample to see it.

Related tools

All Developer tools โ†’
Base64 Encode/DecodeEncode and decode Base64 text (UTF-8) and files. UUID GeneratorGenerate UUID v4 and v7, one or a thousand at a time. JWT DecoderDecode JWTs, check expiry and verify signatures locally. URL Encode/DecodePercent-encode or decode URLs and query strings. JSON FormatterFormat, validate and minify JSON with exact error positions. JSON to CSVConvert a JSON array to CSV or TSV, nested objects flattened. CSV to JSONConvert CSV or TSV to a JSON array, numbers kept exact. Regex TesterTest JavaScript regular expressions with live highlighting.