What hash algorithms are supported?

25 algorithms across 6 families: Legacy (MD2, MD4, MD5), SHA-2 (SHA-1, SHA-224, SHA-256, SHA-384, SHA-512), SHA-3 (SHA3-224, SHA3-256, SHA3-384, SHA3-512, Keccak-256, Keccak-512), BLAKE (BLAKE2b-256, BLAKE2b-512, BLAKE2s-256, BLAKE3), 国密 (SM3), and Other (RIPEMD-160, Whirlpool, CRC32, Adler-32, xxHash32, xxHash64). SHA-1/256/384/512 use Web Crypto API for hardware acceleration; other algorithms use well-tested JavaScript and WebAssembly libraries.

Does HMAC work with all algorithms?

HMAC is supported for SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512. MD2, MD4, MD5, Keccak, BLAKE2, BLAKE3, SM3, Whirlpool, RIPEMD-160, CRC32, Adler-32, and xxHash do not support HMAC. When HMAC mode is enabled, the secret key is combined with the message using the selected hash algorithm to produce a keyed digest.

Is my data sent to a server?

No. All hash computation happens entirely in your browser. SHA algorithms use the native Web Crypto API. Other algorithms use client-side JavaScript and WebAssembly implementations. Your text and secret keys never leave your device. You can disconnect from the internet after the page loads and hashing will still work.

What is hash verification and how does it work?

Hash verification lets you check whether a hash you already have matches the hash of your current input. Paste an expected hash into the Verify field — the tool automatically detects which algorithm it belongs to by its length (8 hex = CRC32 or Adler-32 or xxHash32, 16 = xxHash64, 32 = MD2/MD4/MD5, 40 = SHA-1 or RIPEMD-160, 56 = SHA-224 or SHA3-224, 64 = SHA-256/SHA3-256/Keccak-256/BLAKE2b-256/BLAKE2s-256/BLAKE3/SM3, 96 = SHA-384 or SHA3-384, 128 = SHA-512/SHA3-512/Keccak-512/BLAKE2b-512/Whirlpool) and shows a green checkmark if it matches or a red cross if it doesn't.

What is the difference between uppercase and lowercase?

Hash digests are typically displayed as hexadecimal strings. Uppercase (e.g. E5B3F2) and lowercase (e.g. e5b3f2) are both valid representations. The choice is cosmetic — tools and systems accept either format. Uppercase is common in Windows environments, while lowercase is more typical on Unix/Linux systems.

SM3 is the Chinese national standard cryptographic hash function (GM/T 0004-2012). It produces a 256-bit (64 hex character) hash and is required for use in Chinese government and financial systems. First standardized in 2010, SM3 is considered cryptographically secure and is part of the 国密 (Guomi) cryptographic standard suite.

What is the difference between Keccak-256 and SHA3-256?

Keccak-256 is the original Keccak algorithm as submitted to the SHA-3 competition, with a padding scheme different from the final NIST SHA-3 standard. Keccak-256 (not SHA3-256) is used in Ethereum for things like transaction and message signing (EIP-191). The padding difference means Keccak-256(‘abc’) produces a different output from SHA3-256(‘abc’).

xxHash is a non-cryptographic hash function designed for speed — it can process data at RAM speed limits. xxHash32 produces an 8-character hex output and xxHash64 produces a 16-character hex output. It is not suitable for security purposes but is widely used in databases (e.g. PostgreSQL, Apache Cassandra), file systems (e.g. ZFS deduplication), and data networks for fast hash-based lookups.

Is this tool free to use?

Completely free. No registration, no ads that interfere with usage, no rate limits. All processing runs locally in your browser. We earn revenue through non-intrusive display ads.

Tools

SHA-256|64 hex chars

Input

Output

Hash result will appear here...

0 chars|0 bytes

Hash Calculator

Hash calculator supporting 25 algorithms — MD2, MD4, MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA3-224, SHA3-256, SHA3-384, SHA3-512, Keccak-256, Keccak-512, BLAKE2b-256, BLAKE2b-512, BLAKE2s-256, BLAKE3, RIPEMD-160, SM3, Whirlpool, CRC32, Adler-32, xxHash32, and xxHash64. Compute hash digests of any text input in real time. Features include HMAC with a secret key, uppercase/lowercase hex output, hash verification against a known checksum, one-click copy, and download results. All hashing runs locally in your browser — your data never leaves your device.

Features

✓Support for 25 algorithms — MD2, MD4, MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA3-224, SHA3-256, SHA3-384, SHA3-512, Keccak-256, Keccak-512, BLAKE2b-256, BLAKE2b-512, BLAKE2s-256, BLAKE3, RIPEMD-160, SM3, Whirlpool, CRC32, Adler-32, xxHash32, xxHash64
✓Real-time hash computation — results update instantly as you type or paste
✓HMAC support for SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512
✓Uppercase / lowercase toggle — switch between upper and lower hex output
✓One-click copy — copy hash result to clipboard with a single click
✓Hash verification — paste an expected hash to instantly check match or mismatch (auto-detects algorithm by hash length)
✓Download results — save computed hash as a .txt file
✓All processing happens locally in your browser — zero data uploaded

How to Use

1Select a hash algorithm from the pills — 25 algorithms including SHA-3, Keccak, BLAKE family, SM3, Whirlpool, xxHash, CRC32, and Adler-32.
2Type or paste text into the input area. The hash digest updates automatically in real time.
3Toggle UPPERCASE / lowercase to change the hex output format.
4Enable HMAC mode and enter a secret key to compute a keyed-hash message authentication code (SHA-1/224/256/384/512 only).
5Click the copy button to copy the hash, or use Download to save as a .txt file.
6Paste an expected hash into the Verify field to compare — algorithm is auto-detected by hash length.

Frequently Asked Questions

Related Tools

UUID / GUID Generator

Generate UUIDs, GUIDs, NanoIDs, and ULIDs online instantly. Create v1 (time-based), v3/v5 (name-based), v4 (random), v6, or v7 (sortable time-ordered) UUIDs with one click. Bulk generate thousands of unique IDs for database seeding and testing. Validate and decode UUIDs to inspect version, variant, and timestamp. Customize output case, hyphens, and braces wrapping. Copy to clipboard or download as text file. All generation uses cryptographically secure random numbers — no data leaves your browser.

Base64 Encode / Decode

Base64 encoder and decoder. Encode text to Base64 or decode Base64 back to readable text with real-time auto-detection. Supports UTF-8 characters including emojis, Chinese, and other non-Latin scripts. Features include drag-and-drop file upload, one-click copy, and download results as text files. All processing runs locally in your browser — your data never leaves your device.

JWT Parser

JWT parser and debugger. Decode JSON Web Tokens instantly — view header, payload, and signature in readable format. Inspect registered claims (exp, iat, nbf, iss, sub, aud) with human-readable timestamps. Detects expired tokens, missing expiration, weak algorithms, and alg:none security issues. All processing runs locally in your browser — your tokens never leave your device.