Hash calculator

SHA-256, SHA-384, SHA-512, SHA-1, and MD5 — computed in your browser via SubtleCrypto. Nothing is sent anywhere.

UTF-8 encoded. All hashes are computed in your browser.

SHA-1 + MD5 are NOT secure. Useful for checksums and legacy interop only — never for integrity / password / signing use cases.

Keep hardening your site

This is one check of many. Run the rest — every tool is free, no account.

Security headers scan

Grade your live response headers

TLS certificate scan

Grade chain, expiry, and key strength

Security headers builder

Emit a ready-to-paste header block

CSP analyzer

Grade your Content-Security-Policy

Cookie security audit

Check Secure, HttpOnly, SameSite

Mixed-content scanner

Find http:// assets on https pages

Open-redirect detector

Probe redirect params for abuse

HSTS preload checker

Grade against Chrome's preload list