Hash & crypto tools
Developers reach for these tools when they need to hash a password before storing it, verify a downloaded file's checksum, generate an HMAC signature for an API request, or produce a key pair for testing without touching a production certificate authority. The set covers common hashing algorithms alongside password-specific schemes such as bcrypt, scrypt, Argon2id and PBKDF2, plus symmetric encryption and key inspection for everyday cryptography work.
Pick the hash generator when you're comparing several algorithms at once, the password hash generator specifically when the value will be stored and checked against user logins, and the CRC calculator for lightweight checksums like CRC16 or CRC32 rather than cryptographic hashes. The AES-GCM tool tests encryption and decryption with raw keys, and the key pair generator and SSH key inspector round out key handling. Every tool here runs locally in your browser.
9 tools
Hash and checksum data
-
Hash generator
Compare multiple hash algorithms with configurable salt positions
-
HMAC generator
Generate and verify HMAC-SHA digests with message and key encoding
-
Password hash generator
Generate and verify salted hashes with bcrypt, scrypt, Argon2id or PBKDF2
-
CRC calculator
Compute CRC16, CRC32 or Adler-32 checksums with model parameter selection
-
File checksum
Calculate MD5, SHA-1, SHA-256 and other checksums for downloaded files
Generate and inspect keys
-
Key pair generator
Generate an RSA or EC test key pair, or inspect an existing key, then export as PEM or JWK
-
SSH key inspector
Read OpenSSH public key algorithms and compute SHA256 fingerprints
-
JWK converter
Convert JWKS sets and PEM keys to JWK format with thumbprint validation
-
AES-GCM encrypt/decrypt test
Encrypt and decrypt with AES-GCM using raw keys and nonce separation
Hash & Crypto Helpers tools FAQ
Hashing is one-way: a hash generator or CRC calculator turns data into a fixed-length digest you can't reverse, which is useful for checksums and integrity checks. Encryption with the AES-GCM tool is two-way, so anyone holding the key can decrypt the ciphertext back into the original message.
Plain SHA-256 is fast, so an attacker can try billions of guesses per second against a leaked hash. The password hash generator instead uses bcrypt, scrypt, Argon2id or PBKDF2, which add salt and deliberately slow computation to make brute-forcing a stolen hash impractical.
Run the file checksum tool against the download and compare the result to the MD5, SHA-1 or SHA-256 value the publisher listed. A mismatch means the file changed in transit or the download is incomplete, and you'll know before you ever open it.