Type text (hashed as UTF-8 bytes) or open / drop a file. Hashes update as you type. Line breaks in the text box are \n; hash a file if you need the exact bytes.
Verify a download: drop the file, then paste the published checksum into Compare. The matching row turns green (hex is compared case-insensitively; Base64 works too).
HMAC: enter a secret key (UTF-8) and HMAC rows appear below the plain hashes — used for webhook signatures and API request signing.
MD5 and SHA-1 are broken for security (collisions are practical) — fine for checksums, never for passwords or signatures. For passwords use a slow hash such as Argon2, bcrypt or scrypt, not any hash here. CRC32 only detects accidental corruption.
Shortcut: Ctrl/⌘+Enter copies the SHA-256 (or HMAC-SHA256 when a key is set). Click any hash to copy it.