A hash is a fixed-length fingerprint calculated from input data.

HMAC combines a cryptographic hash with a secret key to authenticate data.

Can hashes be reversed?

Cryptographic hashes are designed to be one-way and cannot be directly decoded.

Developer Tool Developer Tool

Hash & HMAC Generator

Generate MD5 and SHA fingerprints or keyed HMAC values for text, API testing, and integrity checks.

✓5 common algorithms ✓Optional HMAC ✓Instant output

Use HMAC Uppercase

Hashes Ready

Input text

Hash values generated successfully.

Generated Values

Click any result to copy it.

MD5

4b9d8c97fd72b0541b390a65ac7658fe

SHA-1

c2f2c31b54779636dab6b30b35d90dec65fa4222

SHA-256

308e28e632712aee2e20afcdcb51388dfd9f086b0ac8127e79554f5960874ed9

SHA-384

cda585c6add687c7fcd1298fc30b89ec3ca52bade7f17dcb319b5dadeee451272c089162de3aa5762ce7b0b0682efd57

SHA-512

29d73f4ba751dc41e18db806c8eecf50ce41f55d75f8dc825adbdfe34139df2e21caa8f8b0a43ec97d0928e2523cd8de135febc02d1831d08ad6bd0518b9643c

Bcrypt Password Hasher

Password Safe

Generate salted password hashes and verify passwords against them.

Password

Cost factor

Use test data here. Production passwords should be hashed directly inside your application.

Bcrypt hash

Enter a password to generate a secure bcrypt hash.

How to Use

1Enter TextPaste the value you want to hash.
2Choose HMACOptionally provide a secret key.
3ReviewCompare five generated algorithms.
4CopyCopy one value or the full set.

Technical Specs

Algorithms: MD5 + SHA + Bcrypt
HMAC: All digest algorithms
Bcrypt Cost: 10–14
Maximum Size: 1 MB

Integrity and authentication

Hashing is not encryption

A hash is a one-way fingerprint and cannot be decoded like Base64. Use SHA-256 or stronger for integrity checks. MD5 and SHA-1 remain useful for legacy compatibility and non-security checksums, but should not protect passwords or security-sensitive data.

Frequently Asked Questions

Can a hash be reversed? +

No direct decoding operation exists. Weak inputs can still be guessed and compared against their hashes.

Why does bcrypt change every time? +

Bcrypt creates a fresh random salt for every hash. Different hashes can all correctly verify the same password.

Which algorithm should I use? +

Use SHA-256 for general integrity checks and bcrypt or Argon2id for passwords.

What is HMAC? +

HMAC combines a hash algorithm with a secret key to verify message authenticity and integrity.

Are MD5 and SHA-1 secure? +

Not for collision-resistant security. They are included for legacy interoperability and checksums.

Hashing vs Encryption Understand the security difference SHA-256 Explained Learn modern hashing basics HMAC for API Signatures Authenticate webhook payloads

Developer newsletter

Stay Ahead

Get practical developer guides, new tools, and workflow improvements without inbox noise.