Free tool · No sign-up
Hash Generator
Hash text or a file with SHA-2 (SHA-256/384/512) and the quantum-resistant SHA-3 family — SHA3-256/384/512 and the SHAKE256 XOF used in the post-quantum signature scheme SPHINCS+. SHA-2 runs on the browser's native crypto so a large file hashes at full speed; SHA-3 comes from a small audited library. Compare against an expected checksum to verify a download in one glance. Nothing is uploaded.
Case-insensitive; a leading 0x is ignored. The matching algorithm lights up below.
Keccak — the newest NIST standard (FIPS 202), and the hash under SPHINCS+ and ML-DSA. A hash is already safe from Shor's algorithm; Grover's only halves its strength, so any digest of 256 bits or more keeps a 128-bit margin against a quantum attacker.
- SHA3-256128-bit quantum
— - SHA3-384192-bit quantum
— - SHA3-512256-bit quantum
— - SHAKE256256-bit quantum
—
The workhorse family, computed with the browser's native crypto.
- SHA-256128-bit quantum
— - SHA-384192-bit quantum
— - SHA-512256-bit quantum
—
For checking old artifacts only.
- SHA-1avoid
—
- SHA-2 hashing uses the browser's native SubtleCrypto, so even a large file is fingerprinted at full speed. SHA-3 uses @noble/hashes, a small audited library — both run entirely in your browser.
- Quantum resistance, for a hash, is a matter of output size. A quantum computer does not break hashing the way Shor's algorithm breaks RSA; Grover's algorithm only halves the strength, so any digest of 256 bits or more keeps a 128-bit quantum margin.
- SHA-3 (Keccak) is the newest NIST standard and structurally unlike SHA-2, which is why it is offered alongside it. SHAKE256 is shown at its first 512 bits — the size used in SPHINCS+ and ML-DSA.
- SHA-1 is shown for verifying legacy artifacts; treat it as broken for anything security-sensitive and prefer SHA-256 or better.
- Text is hashed as UTF-8 bytes; a file is hashed exactly as it sits on disk, byte for byte. Client-side only.
Other tools
More on the bench
- 01
UUID Generator
v4 and v7, one or a thousand. - 02
Password & Key Generator
Strong passwords and API keys, in the browser. - 03
Supabase Security Auditor
Point it at your project, find the holes. - 04
JWT Decoder
Paste a token, read what is inside. - 05
Secret & .env Scanner
Paste code or a .env, catch the leaked keys. - 06
Security Headers Scanner
Enter a URL, grade its headers. - 07
CORS Tester
See exactly what a URL allows cross-origin. - 08
Base64 Encode / Decode
Text or files, both directions.
Software engineering
We write the software
behind tools like these
Anyone verifying a download, fingerprinting a file, or reaching for a quantum-resistant SHA-3 digest.
- Free diagnostics
- Same-day across most of the metro
- Named technicians
- No fix, no labour charge