CR Tools

Hash & HMAC

Digests, HMAC signatures, file checksums and safe comparison.

Hashing is byte-for-byte: multi-byte characters count as their UTF-8 bytes, which is what every other tool does.

MD5 and SHA-1 are here for compatibility, not for security.

Nothing yet: paste something and press the button.

What to watch for.

A digest is not a password hash: these functions are fast on purpose, so a stolen database of SHA-256 digests can be brute-forced offline. Passwords need bcrypt or argon2, which this page deliberately does not offer. File uploads are read from the temporary directory and capped at 100 MB.