#️⃣ Hash & HMAC Generator

Using Hash Generator (MD5, SHA-1, SHA-256)

Compute MD5, SHA-1, SHA-256, SHA-512 and RIPEMD-160 digests of a string to compare with a published checksum, or an HMAC to test a webhook signature.

How to use it

1. Type or paste the exact text into Input String. A trailing space or newline changes every digest.
2. Read the digest for the algorithm your system uses; all five are calculated at once.
3. For a signed webhook or API request, tick Enable HMAC Keyed Mode and enter the shared secret in HMAC Secret Key.
4. Copy the value and compare it with the one you expected, character by character or with your editor's search.

Worked example

Input and settings

order=1042&amount=250 with HMAC key shared-secret (SHA-256)

Expected result

027af27a785f3b2026d4fbd620db08cd133a39de821f06aba4a8079203b2e0cd

Limits and common mistakes

• Text is hashed as UTF-8; a system that hashes another encoding will produce a different digest for accented or non-Latin text.
• MD5 and SHA-1 are broken for security purposes; use them only to match an existing legacy checksum.
• Fast hashes are the wrong tool for storing passwords, because attackers can try billions per second; use bcrypt instead.
• This page hashes text, not files. To check a downloaded file, use your operating system's checksum command.

Found a mismatch? Report a problem with a non-sensitive example. Read our privacy information before sharing inputs or links.