passgen
Passwords & Security

Fingerprint any text or file.

Get SHA hashes of text or a file. Files are read and hashed on your device — never uploaded.

SHA-256
—
SHA-512
—
SHA-384
—
SHA-1 (legacy)
—

How it works

Hashing uses your browser's built-in Web Crypto API. Text is encoded as UTF-8 before hashing, so the results match command-line tools like sha256sum for the same input.

Use it to verify downloads against a published checksum, compare files, or create a fingerprint of some data. Note that a plain hash is not a safe way to store passwords — those need a slow, salted algorithm such as Argon2 or bcrypt.

FAQ

Why isn't MD5 included?

MD5 and SHA-1 are broken for security purposes. SHA-1 is included only for compatibility with older checksums; prefer SHA-256 or SHA-512 for anything new.

Is there a file size limit?

Only your device's memory. Very large files (several gigabytes) may be slow or fail on phones.

Can a hash be reversed?

No. A hash is one-way, but short or common inputs can be guessed by hashing candidates and comparing, which is why hashes alone shouldn't protect passwords.

More tools

Password Generator

Strong random passwords with the length and complexity you pick.

In-browser

Password Strength Checker

See how long a password would survive a brute-force attack.

In-browser

Passphrase Generator

Memorable multi-word passphrases from the EFF wordlist.

In-browser