Fingerprint text or files with MD5, SHA-1, SHA-256, SHA-512 and CRC32 live in your browser — verify checksums and stamp salted bcrypt hashes.

Every digest is computed live in your browser — your text or file never leaves this page. Only bcrypt is stamped on the server.

Input
Drop a file to hash it Any file type, up to 200 MB — read locally, never uploaded.
waiting for input
Fingerprints
MD5 128-bit legacy Match
········
SHA-1 160-bit legacy Match
········
SHA-256 256-bit Match
········
SHA-512 512-bit Match
········
CRC32 32-bit Match
········
bcrypt server-side

Salted password hash, stamped on the server with PHP's password_hash() — a fresh salt makes every stamp unique.

Verify bcrypt hashes with password_verify(), never by comparing strings.


About Hash Generator

The Hash Generator fingerprints text or files with MD5, SHA-1, SHA-256, SHA-512 and CRC32, all computed live in your browser as you type — your input never leaves the page. Drop in a file (up to 200 MB, read locally) to hash it for checksum verification without uploading a byte.

A verification panel makes checksum checking painless: paste an expected hash and the tool matches it against every computed digest, telling you which algorithm it is and whether it matches your input. Legacy algorithms are labeled as such — MD5 and SHA-1 remain fine for checksums and deduplication but are broken for security use.

One algorithm works differently: bcrypt. Salted password hashes cannot be computed with the browser’s crypto primitives, so bcrypt stamping posts your text to the server, where PHP’s password_hash() generates a fresh salted hash — a new one on every click, by design.

How to use Hash Generator

  1. Type or paste text, or switch to File mode and drop in a file to hash locally.
  2. Read the live digests: MD5, SHA-1, SHA-256, SHA-512 and CRC32 update as you type.
  3. To verify a download, paste the expected checksum into the Verify panel and look for a match.
  4. Copy an individual digest, copy all, or download them as checksums.txt.
  5. For a salted password hash, click “Stamp bcrypt hash” — this one is generated server-side.

Frequently asked questions

No — with one exception. MD5, SHA-1, SHA-256, SHA-512 and CRC32 are all computed in your browser, and files are read locally. Only the optional bcrypt stamp posts your text to the server, because salted password hashing runs there.

SHA-256 is the modern default for integrity checks and signatures; SHA-512 where you want a larger digest. MD5 and SHA-1 are flagged as legacy: acceptable for checksums and deduplication, but never for anything security-sensitive.

Drop the file in, then paste the checksum from the download page into the Verify panel. The tool compares it against every computed digest and confirms the match — or tells you the value looks like a given algorithm but does not match.

That is correct behavior. bcrypt embeds a random salt, so the same input yields a different hash on every stamp. Verify bcrypt hashes with password_verify() (or your language’s equivalent), never by comparing strings.

Yes — all algorithms, including the server-side bcrypt stamp, are free to use without an account.

Yes, files up to 200 MB are supported and read entirely on your device. Larger files are rejected with a clear message rather than silently truncated.


Popular searches
hash generator md5 hash sha256 generator sha512 hash online checksum calculator bcrypt hash generator
Need help?
Found an issue with this tool? Let our team know.
Report an issue

Add this free tool to your own website — copy and paste the code below.