CraftTools

Hash Generator

Guide: How to Create a Strong Password (and Keep It Safe)

MD5 (not secure, checksums only)
…
SHA-1
…
SHA-256
…
SHA-384
…
SHA-512
…

Nothing you enter or choose here leaves your device. This tool runs in your browser.

How to use

  1. 1Type or paste text, or choose a file to hash.
  2. 2Optionally add a secret key to create an HMAC instead of a plain hash.
  3. 3Read the five hashes, shown instantly.
  4. 4Click Copy next to the one you need.

Frequently asked questions

Which hash should I use?

Use SHA-256 or SHA-512 for anything security related. MD5 and SHA-1 are broken for security, but are still fine for checking that a file wasn't corrupted.

Can I hash a file?

Yes. Choose "Hash a file instead" and the file is read in your browser and never uploaded. Files up to 500 MB work, depending on your device's memory.

What is an HMAC?

An HMAC mixes a secret key into the hash so only someone with the key can create or check it. It is used to sign API requests and webhooks.

Can a hash be reversed?

No. Hashing is one way. Short or common inputs can be guessed with lookup tables, which is why passwords should be hashed with a slow, salted algorithm such as bcrypt or Argon2.

Read the guides

Learn how this works and how to get the most from it.

Security

How to Create a Strong Password (and Keep It Safe)

Why length beats complexity, how long a password should be, how passphrases work and how developers should store passwords.

2 min read

Developer

UUID, ULID and NanoID: Which Unique ID Should You Use?

How UUID v4, UUID v7, ULID and NanoID differ, why sortable IDs help databases, and how to pick the right one for your project.

1 min read

Security

What Is a Hash Function? MD5, SHA-256 and Bcrypt Explained

Learn what hashing does, why the same input always gives the same hash, which algorithms are still safe, and why passwords need bcrypt.

1 min read

Security

How Password Encryption Works (AES) and When to Use It

What AES encryption does, why a password becomes a key, how to protect a message or file, and what you can't recover if you forget the password.

2 min read

File Hash Compare

Check a download against its checksum, or compare two files.

AES Encrypt & Decrypt

Lock text or files with a password, right in your browser.

Bcrypt Hash Generator & Checker

Generate bcrypt password hashes and check a password against a hash.

RSA & SSH Key Pair Generator

Make SSH and PEM key pairs: Ed25519, RSA or ECDSA.