# Hash Generator

> Generate cryptographic hashes (SHA-256, SHA-1, MD5, and more) from text using Web Crypto in your browser. Create checksums for files-as-text, compare digests, and copy hex output. Hashing never leaves the tab, so test strings and secrets stay private.

Runs in your browser. Nothing is uploaded.

[Crypto](https://toolbuddy.dev/categories/crypto.md)

## About this tool

Hash text or a local file with MD5 (SparkMD5), SHA-1, SHA-256, or SHA-512. SHA family uses Web Crypto; output is hex and Base64. File hashing reads an ArrayBuffer in the tab. The file is not uploaded to a checksum SaaS.

How to use: paste a string or choose a file, pick an algorithm, copy hex or Base64. Checksum fixtures, compare downloads you already have, and fingerprint strings for cache keys. MD5 and SHA-1 are offered for compatibility, not for new password storage.

Example: hashing 'hello' with SHA-256 yields the well-known hex digest you can match against a unit test. A local ISO image can be fingerprinted without leaving the machine.

Digests are computed on-device. Source strings and files never leave the tab. Related: Base64 encoder for transport, password generator if you needed a secret rather than a digest. Copy hex for git-style checksums and Base64 when an API wants that alphabet. After the page loads you can keep hashing offline.

## Related Crypto tools

- [HMAC Generator](https://toolbuddy.dev/tools/hmac-generator.md): Compute HMAC-SHA signatures in the browser for webhook secrets and API signing. Paste a message and a key, pick SHA-1 through SHA-512, and copy hex or Base64. Keys stay in the tab.
- [JWT Decoder](https://toolbuddy.dev/tools/jwt-decoder.md): Decode JSON Web Tokens locally to inspect the header, payload, and expiry claims. Paste a JWT and read Base64URL-encoded fields without verifying signatures on a remote service. Ideal for debugging auth flows while keeping tokens off the network.
- [JWT Encoder](https://toolbuddy.dev/tools/jwt-encoder.md): Sign a JSON object into a compact HS256, HS384, or HS512 JSON Web Token in the browser. The HMAC secret stays in the tab, so you can mint a test token without posting it to a hosted encoder.
- [AES Encrypt](https://toolbuddy.dev/tools/aes-encrypt.md): Encrypt and decrypt text with AES-256-GCM in the browser. A password is stretched with PBKDF2; output is Base64(salt + IV + ciphertext). Useful for sharing a short secret over a side channel you control. Keys never leave the tab.
- [TOTP Generator](https://toolbuddy.dev/tools/totp-generator.md): Compute a time-based one-time password from a Base32 secret with HMAC-SHA, the same algorithm authenticator apps use (RFC 6238). Pick SHA-1, SHA-256, or SHA-512, 6 or 8 digits, and a 30- or 60-second step. The secret stays in the tab.
- [Secret Redactor](https://toolbuddy.dev/tools/secret-redactor.md): Redact JWTs, AWS keys, GitHub tokens, private keys, bearer tokens, and emails in pasted logs. Replacement happens in the tab.