Hash Generator

When you need a hash

• File integrity checks. Compare your hash with the published one to verify a download wasn't tampered with.
• Password storage (use bcrypt/argon2, never MD5/SHA-1).
• API request signing — HMAC-SHA-256 is the standard for webhook signatures (KopoKopo, PesaPal, GitHub all use this).
• Database row deduplication via content hashes.
• Generating idempotency keys for safe API retries.

Which algorithm should I use?

SHA-256 for everything modern. Fast, collision-resistant, ubiquitous. MD5 and SHA-1 are cryptographically broken — only use them for non-security checksums (legacy systems, fast deduplication where collisions don't matter).

All hashing happens in your browser via window.crypto.subtle. No data is sent to our server.