Loopy HQ LogoSupport Us
Free Developer Tool • 100% Client-Side

Hash Generator & Checksum Tool

Generate cryptographic hashes, HMAC codes, and verify checksums for text and files. MD5, SHA-1, SHA-256, SHA-384, SHA-512, SHA-3, RIPEMD-160 — all in one place.

Supported Algorithms

MD5Legacy

128-bit (32 chars). Fast but cryptographically broken. Use for non-security checksums only.

SHA-1Deprecated

160-bit (40 chars). Deprecated since 2017 due to collision attacks. Avoid for security use.

SHA-256Recommended

256-bit (64 chars). Industry standard. Used in TLS, Bitcoin, Git (v2), and most modern systems.

SHA-384

384-bit (96 chars). Truncated SHA-512, used in TLS 1.2+ cipher suites.

SHA-512

512-bit (128 chars). Maximum SHA-2 strength. Faster than SHA-256 on 64-bit CPUs.

SHA-3Latest Standard

Keccak-based sponge construction. Different internal design from SHA-2 for defense-in-depth.

RIPEMD-160

160-bit (40 chars). European alternative to SHA-1. Used in Bitcoin address generation.

HMACKeyed

Combines hash + secret key for authentication. Used in JWTs, webhooks, and API signing.

The most complete online hash generator for developers

This free hash generator tool supports every major cryptographic hash algorithm in one clean interface: MD5, SHA-1, SHA-256, SHA-384, SHA-512, SHA-3 (256 and 512), and RIPEMD-160. Generate hashes for text input, compute file checksums with drag-and-drop, create HMAC authentication codes with a secret key, and verify checksums against expected values.

Everything runs 100% in your browser using the Web Crypto API and optimized JavaScript libraries. Your text, files, and secret keys are never transmitted to any server. The tool works offline and processes large files without uploading them.

Whether you need to verify a downloaded ISO file, generate an HMAC for API authentication, compare checksums for data integrity, or convert between hex and base64 encodings — this tool handles it all with a premium developer experience.

Frequently Asked Questions

What is a hash and how does hashing work?
A hash is a fixed-length string produced by a one-way mathematical function. The same input always produces the same hash, but even changing a single character creates a completely different output. Hashes cannot be reversed to recover the original data, making them ideal for integrity verification, digital signatures, and password storage.
What is SHA-3 and when should I use it?
SHA-3 (Keccak) is the newest member of the Secure Hash Algorithm family, standardized by NIST in 2015. Unlike SHA-2, it uses a completely different internal structure (sponge construction). Use SHA-3 when you need an alternative to SHA-2 for defense-in-depth, or when compliance requirements mandate it.
Can I use this tool to hash passwords?
This tool generates simple cryptographic hashes. For password storage, you should use specialized password hashing functions like bcrypt, scrypt, or Argon2id that include salting, key stretching, and configurable work factors. Plain SHA or MD5 hashes are NOT secure for storing passwords.
Is my data sent to a server?
No. All hashing is performed entirely in your browser using the Web Crypto API and JavaScript libraries. Your text, files, and secret keys are never transmitted to any server. You can verify this by using the tool offline.
Which hash algorithm is the most secure?
For general-purpose use, SHA-256 or SHA-3-256 are recommended. For maximum security, SHA-512 or SHA-3-512 provide larger output sizes. MD5 and SHA-1 are considered broken for security purposes and should only be used for backward compatibility or non-security checksums.
What is the difference between MD5, SHA-1, SHA-256, and SHA-512?
• MD5 produces a 128-bit (32-character) hash. It is fast but cryptographically broken — use only for legacy checksums. • SHA-1 produces a 160-bit (40-character) hash. Also deprecated for security use since 2017. • SHA-256 produces a 256-bit (64-character) hash. The current recommended standard for most applications. • SHA-512 produces a 512-bit (128-character) hash. Stronger than SHA-256, preferred for high-security applications.
What is HMAC and how is it different from a regular hash?
HMAC (Hash-based Message Authentication Code) combines a cryptographic hash function with a secret key. While a regular hash only verifies data integrity, HMAC also verifies authenticity — only someone with the secret key can produce or verify the correct HMAC. It is widely used in API authentication, JWT tokens, and webhook verification.
How do I verify a file checksum?
Drop or select a file in the File Hash tab to compute its hash. Then paste the expected checksum in the Verify tab and click Compare. The tool will tell you if they match. This is essential for verifying downloaded software, ISO images, and firmware updates have not been tampered with.
What is the difference between Hex and Base64 output encoding?
Hex encoding represents each byte as two hexadecimal characters (0-9, a-f), producing a longer but more readable output. Base64 encoding uses 64 ASCII characters to represent binary data more compactly (about 33% shorter than hex). Use hex for checksums and comparisons, Base64 for APIs and data transmission.
Can I hash large files without uploading them?
Yes. This tool processes files entirely in your browser using streaming where possible. Files never leave your device. However, very large files (over 2GB) may be slower due to browser memory constraints. For best performance, modern browsers with Web Crypto support are recommended.

You might also like

Password Generator

CSPRNG-powered passwords, passphrases & PINs. Bulk generation, templates, strength meter, and zero server transmission.

JSON Formatter & Validator

Beautify, minify, and validate JSON with exact line and column errors, key sorting, and structure stats.

UUID Generator

UUID v4 (random) and v7 (time-ordered) generator. Bulk generation, copy first or all, braces formatting.

Base64 Encoder & Decoder

Encode and decode Base64 with standard or URL-safe mode. Live conversion as you type.

Regex Tester

Live regex testing with match highlighting and capture groups. All JavaScript flags supported.

URL Encoder & Decoder

Percent-encoding with 3 modes, batch processing, URL parser, character analysis, and cheat sheet. All in-browser.

View all tools