Hashing & Crypto Tools
Free online cryptography tools for developers — generate MD5/SHA/BLAKE2 hashes, HMACs, bcrypt and PBKDF2 keys, JWTs, JWKs, TOTP codes and OAuth PKCE challenges. All operations run client-side.
23 free hashing & crypto tools — all browser-based
MD5 Hash Generator
A fast and efficient tool for generating MD5 hashes from your text or files. MD5 (Message Digest Algorithm 5) produces a 128-bit (16-byte) hash value, typically expressed as a 32-character hexadecimal string..
SHA-1 Hash Generator
Convert your text or files into SHA-1 hash values. SHA-1 (Secure Hash Algorithm 1) produces a 160-bit (20-byte) hash value, typically rendered as a 40-digit hexadecimal number..
SHA-256 Hash Generator
A powerful and secure hashing tool that converts your text or files into SHA-256 hash values. SHA-256 (Secure Hash Algorithm 256-bit) is a cryptographic hash function that produces a fixed-size 256-bit (32-byte) hash value, typically represented as a 64-character hexadecimal string..
SHA-512 Hash Generator
A robust cryptographic tool that transforms your text or files into SHA-512 hash values. SHA-512 (Secure Hash Algorithm 512-bit) is an advanced cryptographic hash function that generates a fixed-size 512-bit (64-byte) hash, typically displayed as a 128-character hexadecimal string..
BLAKE2 Hash Generator
Generates BLAKE2b and BLAKE2s cryptographic hashes from text or hex input, with optional key for keyed hashing.
HMAC Generator
Generates HMAC (Hash-based Message Authentication Code) signatures for a message using a secret key, supporting MD5, SHA-1, SHA-256, and SHA-512, with hex and base64 output..
Hash Type Identifier
Identifies the algorithm behind an unknown hash string by matching length, charset, and known prefixes.
CRC32 Calculator
Computes the CRC32 checksum (IEEE 802.3 polynomial, as used in zip and Ethernet) of text or hex input, with hex and unsigned decimal output.
PBKDF2 Key Derivation
Derives a PBKDF2 key (RFC 2898 / RFC 8018 PKCS#5 v2.1) from a password and salt using the Web Crypto API, with selectable hash (SHA-1, SHA-256, SHA-384, SHA-512), iteration count, and output bit length, returning the derived key as hex and base64, useful for generating password hashes compatible with Java, Python, and Node.js PBKDF2 implementations and for verifying crypto library interop..
Bcrypt Generator
Hashes passwords with bcrypt using a selectable cost factor (4–31) and produces a salt, then verifies a password against an existing hash.
AES Encrypt Decrypt
Encrypts and decrypts text with AES-256 (CBC mode, PKCS7 padding) using a passphrase, on the client with crypto-js.
Caesar Cipher & ROT13
Shifts letters by a fixed amount.
JWT Tools
Decodes and validates JWT tokens for debugging and security analysis. It extracts claims, expiration details, and verifies signatures if applicable..
JWK Key Generator
Generates JSON Web Key (JWK, RFC 7517) key pairs for RSA and Elliptic Curve (P-256, P-384, P-521) algorithms using the Web Crypto API, exporting the public and private keys as base64url-encoded JWK JSON with kid and alg metadata, useful for configuring JWT signing keys in Auth0, Okta, and AWS Cognito, testing JOSE libraries, and bootstrapping jwks.json endpoints..
TOTP Generator (RFC 6238)
Generates RFC 6238 time-based one-time password (TOTP) codes from a shared secret using the Web Crypto HMAC API, with selectable SHA-1/256/512, 6 or 8 digits, and a configurable time step, plus a live countdown to the next 30-second window, useful for testing 2FA / MFA flows, verifying authenticator apps like Google Authenticator and Authy, and debugging OTP validation in authentication services..
OAuth PKCE Generator
Generates RFC 7636 PKCE code verifier and code challenge pairs using the Web Crypto API, supporting S256 and plain challenge methods with a cryptographically secure random verifier, useful for implementing OAuth 2.0 Authorization Code Flow with PKCE in SPAs and mobile apps, debugging Auth0 / Okta / AWS Cognito login flows, and testing public-client security configurations..
Basic Auth Header Generator
Generates an HTTP Basic Authentication header from a username and password by base64-encoding the credentials, ready to paste into API clients or curl commands..
Password Generator
Generates cryptographically secure random passwords with configurable length and character sets (uppercase, lowercase, numbers, symbols), plus an entropy-based strength meter..
Password Strength Checker
Analyzes an existing password for length, character variety, common-password matches, and sequential or repeated patterns, with an entropy-based strength score..
X.509 Certificate Decoder
Decodes an X.509 / TLS certificate from PEM or DER by parsing the ASN.1 structure in the browser, showing the version, serial number, signature algorithm, issuer and subject distinguished names, validity window with days remaining, public key algorithm and size, subject alternative names, basic constraints, key usage and extended key usage, plus SHA-256 and SHA-1 fingerprints..
SSH Key Fingerprint Generator
Computes the fingerprint of an OpenSSH public key exactly as ssh-keygen -lf does, decoding the base64 blob to read the key type and size and emitting both the modern SHA256:base64 form and the legacy MD5 colon-hex form, useful for confirming that a key in authorized_keys, a GitHub account or a host key warning is the one you expect..
htpasswd Generator
Generates Apache and nginx .htpasswd entries with bcrypt ($2y$), the Apache-specific apr1 MD5 variant, or SHA-1, accumulating several user lines into a complete file, with a verifier that checks a password against an existing bcrypt or apr1 line, all computed in the browser so the password is never transmitted..
Subresource Integrity (SRI) Generator
Generates the integrity attribute for a script or stylesheet by hashing its exact bytes with SHA-256, SHA-384 or SHA-512 and base64-encoding the digest into the sha384-… form the SRI specification requires, emitting a ready-to-paste tag with crossorigin="anonymous", so a CDN that silently changes a file is blocked by the browser..
Choosing a hashing algorithm
MD5 and SHA-1 are fast but broken for security — use them only for checksums. SHA-256/512 are secure for general use.
For password storage prefer bcrypt or PBKDF2, which are deliberately slow and salted to resist brute force.
Working with JWTs and JWKs
The JWT tools let you sign and decode JSON Web Tokens to inspect header/payload claims.
Generate RFC 7517 JSON Web Keys (RSA or EC) with the JWK Key Generator for configuring JWT signing in Auth0, Okta or AWS Cognito.
TOTP and OAuth PKCE
The TOTP Generator produces RFC 6238 time-based one-time passwords from a shared secret and timestep.
OAuth PKCE pairs a random verifier with an S256 code challenge to secure public OAuth clients — generate both with the PKCE tool.
Frequently asked questions
Are cryptographic keys generated in the browser?
Yes. Keys, hashes and tokens are generated locally using the Web Crypto API. Nothing is sent to a server.
Is bcrypt suitable for production passwords?
The bcrypt tool is great for testing and learning. For production, use a server-side library with an appropriate cost factor.