Hash Generator
SHA-256/512 hashing for text and files via Web Crypto.
Hash Generator computes SHA-256 and SHA-512 digests for text and local files using the browser Web Crypto API. Choose hex or Base64 output, verify checksums, and fingerprint strings—all without uploading data to a server.
How it works
Text input is encoded to UTF-8 bytes. Files are read into an ArrayBuffer. crypto.subtle.digest runs the selected SHA algorithm and the result is formatted as lowercase hex or Base64 for copying.
Benefits
- SHA-256 and SHA-512 via native Web Crypto
- Text and local file input with no upload
- Hex and Base64 output formats
- Clear guidance on hashing versus encryption
Use cases
- Verify a published SHA-256 file checksum
- Fingerprint configuration snippets before deployment
- Compare digests while debugging cache keys
- Generate stable hashes for test fixtures
Best practices
- Use SHA-256 unless you have a specific need for SHA-512
- Compare digests case-insensitively when publishers use uppercase hex
- Do not use raw SHA-256 alone for password storage—use a dedicated KDF
- Clear the workspace after hashing secrets on shared machines
Common mistakes
- Treating a hash as reversible encryption
- Expecting MD5 support from Web Crypto
- Hashing the wrong encoding (UTF-16 vs UTF-8) when comparing with CLI tools
- Using SHA-256 directly for password storage without salt and stretching
Privacy
Hashing happens locally in your browser using Web Crypto. Files and text are not uploaded to ToolHub. Optional on-device history stores inputs only if you enable it—avoid saving secrets on shared profiles.
Frequently asked questions
- Which algorithms does Hash Generator support?
- This tool supports SHA-256 and SHA-512 through the Web Crypto API (crypto.subtle.digest). MD5 is not included because it is not available in Web Crypto and is deprecated for security-sensitive use.
- Does Hash Generator upload my text or files?
- No. Hashing runs entirely in your browser. Files are read locally via the File API and never sent to a server.
- What output formats are available?
- You can copy the digest as lowercase hexadecimal (common for checksums) or standard Base64 (compact binary representation).
- Can I hash large files?
- Yes, within browser memory limits. The file is loaded into an ArrayBuffer locally. Very large files may be slow or exceed available memory in the tab.
- Is SHA-256 the same as encryption?
- No. Hashing is a one-way fingerprint. You cannot recover the original input from a hash. Use hashing for integrity checks, not for storing reversible secrets without proper key derivation.
- Why is MD5 not offered?
- MD5 is collision-prone and not exposed by Web Crypto. ToolHub focuses on SHA-256 and SHA-512 for modern integrity and fingerprinting workflows.
- How do I verify a downloaded file checksum?
- Select file mode, choose the file, pick the same algorithm used by the publisher (often SHA-256), generate the hash, and compare it to the published checksum string.
Related tools
JWT Decoder
security
Inspect JWT header and payload locally—no signature verify.
- jwt
- token
- decode
- security
Base64 Encode/Decode
developer
Unicode-safe Base64 encode/decode for text and files locally.
- base64
- encode
- decode
- developer
HMAC Generator
crypto
HMAC-SHA256/384/512 signing via Web Crypto.
- hmac
- sha256
- webhook
- signature
AES Encrypt/Decrypt
crypto
Password-based AES-256-GCM demo via Web Crypto.
- aes
- encryption
- pbkdf2
- crypto
Password Generator
random
Secure local password generator with strength meter.
- password
- security
- random
- generator