MD5, SHA-1, SHA-256, SHA-512, Keccak & HMAC
InstaHasher generates hexadecimal hash digests from text or local files in your browser. Choose the algorithm you need, enter the input, and copy the result. Your input is not uploaded to InstaHasher.
Note: Files are processed locally in your browser.
A cryptographic hash function maps input bytes to a fixed-length digest. The same bytes and algorithm produce the same result. A hash is not encryption: it has no decryption key and does not hide low-entropy inputs such as common passwords.
| Need | Use | Important limit |
|---|---|---|
| New file checksum | SHA-256 | Compare with a value obtained from a trusted source. |
| Legacy compatibility | MD5 or SHA-1 | Not suitable when an attacker could deliberately create a collision. |
| Message authentication | HMAC with the protocol-required SHA variant | A plain hash is not a message authentication code. |
To calculate and compare a downloaded file, use the online file checksum calculator. For background, read what hashing means or compare MD5 and SHA-256.
Sources reviewed 9 September 2026: NIST Secure Hash Standard, IETF RFC 6151 on MD5, and the CryptoJS implementation note.
An online hash generator converts text or file bytes into a fixed-length digest. InstaHasher performs that calculation in your browser and shows the hexadecimal result; it does not encrypt the input and a hash is not reversible decryption.
No. Hash and HMAC calculations run in JavaScript in your browser, so the text, selected file and HMAC key are not sent to InstaHasher. The page can load analytics only after consent, but the tool does not send the value being hashed.
Use the algorithm specified by the system or publisher you need to interoperate with. For a new file-integrity workflow, SHA-256 is a practical default. MD5 and SHA-1 remain available for legacy comparison but should not protect against deliberate tampering.
Not by itself. Password storage should use a salted, deliberately expensive password-hashing or key-derivation function such as Argon2id, scrypt, bcrypt or PBKDF2, with parameters chosen for the application. This utility generates general-purpose digests and HMACs.