Hashing explained: digests, checksums, and integrity
How cryptographic hash functions work, what a digest proves, and where SHA-256, HMAC, and password hashing each belong. Local tools available on wowTools.
A cryptographic hash function turns any input into a fixed-length digest. The same input always produces the same digest, a single changed byte produces a completely different one, and there is no practical way to run the function backwards. Those three properties are why digests appear everywhere integrity matters: file downloads, cache keys, deduplication, and signature schemes.
What a digest does and does not prove
A matching digest proves two inputs are byte-identical. It says nothing about who produced them. Anyone can recompute a public SHA-256 value for modified content, which is exactly why webhook providers sign payloads with a keyed construction instead of publishing a plain checksum.
Choosing an algorithm
For general integrity work, SHA-256 is the interoperable default and SHA-512 offers a larger margin and often better throughput on 64-bit hardware. MD5 and SHA-1 are broken for collision resistance and should not be used for anything security-relevant, even though they still appear in legacy checksums.
Passwords are a different problem
Fast hashes are the wrong tool for stored credentials precisely because they are fast: an attacker with a leaked table can try billions of guesses. Password storage needs a deliberately slow, salted algorithm such as Argon2 or bcrypt, with a work factor tuned to your hardware.
Practise locally
Compute digests for text or files with Hash Generator, sign a payload with HMAC Generator, and compare the two workflows side by side in HMAC vs Plain Hash. For password-specific guidance, continue with password security basics.
Try related tools
Keep exploring
- learnPassword security that actually helpsWhy length beats complexity rules, how entropy is estimated, and what to do with generated secrets after you copy them. Local tools available on wowTools.
- learnHow to use Hash GeneratorSHA-256/512 hashing for text and files via Web Crypto. A practical guide to Hash Generator: when it fits, how to get a reliable result, and the mistakes worth avoiding.
- compareSHA-256 vs SHA-512Two SHA-2 digest sizes compared—security margin, digest length, and performance on 32-bit versus 64-bit systems. Compare approaches side by side, then try
- compareHashing vs EncryptionOne-way digests versus reversible ciphertext—compare what each protects and the mistakes that follow confusing them. Compare approaches side by side, then try
- compareHMAC vs Plain HashKeyed message authentication versus a bare digest—compare webhook verification, tamper detection, and key handling. Compare approaches side by side, then try
- compareAES-GCM vs AES-CBCAuthenticated encryption versus classic block chaining—compare tamper detection, nonce handling, and padding pitfalls. Compare approaches side by side, then
- landingPassword and Hash ToolsGenerate strong passwords, check strength, and compute SHA and HMAC digests locally with Web Crypto. Curated wowTools landing with local browser utilities—no
- glossaryAESAES is a symmetric block cipher standard used with a mode of operation such as GCM or CBC to encrypt data with a shared key. Related wowTools tools and further reading are linked from this glossary entry.
- glossaryChecksumA checksum is a short value computed from data to detect accidental corruption during storage or transfer, usually a hash digest in practice. Related wowTools tools and further reading are linked from this glossary entry.
- glossaryCipherA cipher is an algorithm that transforms plaintext into ciphertext and back using a key, unlike an encoding, which requires no key at all. Related wowTools tools and further reading are linked from this glossary entry.
- glossaryHashGlossary definition for cryptographic hash functions used for integrity checks and fingerprints. Local tools available on wowTools.
- glossaryHMACHMAC is a keyed hash construction that proves a message was produced by someone holding a shared secret, not merely that the bytes are intact. Related wowTools tools and further reading are linked from this glossary entry.
- glossaryWeb Crypto APIThe Web Crypto API is the browser interface for hashing, HMAC, encryption, and cryptographically strong random values without external libraries. Related wowTools tools and further reading are linked from this glossary entry.