How to use it
Type text or choose a file and all hashes appear at once. To verify a download, paste the checksum published by the vendor into Compare; a green message means the file is intact.
Which hash should I use?
- SHA-256 for checksums, signatures and anything security-related.
- MD5 and SHA-1 only to match old systems or detect accidental changes; both are broken for security use.
- HMAC (add a secret key) to sign API requests and verify webhooks, such as Razorpay or GitHub webhook signatures.
- Never store passwords with a plain hash. Use bcrypt, scrypt or Argon2.
Questions
Is my file uploaded?
No. The file is read and hashed inside your browser; nothing leaves your device.
Can a hash be reversed?
No. A hash is one-way. Short or common inputs can be guessed by trying many candidates, which is why passwords need a slow algorithm such as bcrypt.
Why does my hash differ from another tool’s?
Usually a trailing newline or different encoding. This tool hashes the exact UTF-8 bytes you typed; echo in a terminal adds a newline unless you use echo -n.
How do I verify a Razorpay or GitHub webhook?
Compute HMAC-SHA256 of the raw request body with your webhook secret as the key, then compare it with the signature header.
More tools
- PDF editor — fill, sign, annotate and redact
- Compress image to a target size
- Image converter and resizer
- Images to PDF
- Merge PDF files
- Split PDF and extract pages
- Rotate PDF pages
- QR code generator — links, UPI, Wi-Fi, contacts
- URL shortener with click count
- Unit converter
- JSON formatter and validator
- JWT decoder
- Unix timestamp converter
- Base64 encoder and decoder
- Encrypt and decrypt text or files with a password
- Strong password generator
- Cron expression explainer
- Regex tester
- JSON to CSV converter (and CSV to JSON)