Tool
Hash & Encrypt
Hashes, HMAC, and AES encryption — all local, nothing uploaded.
Everything runs locally as UTF-8. Hashes cannot be reversed; AES can, with the password.
Hash
- MD5
- SHA-1
- SHA-256
- SHA-384
- SHA-512
- CRC32
HMAC
Uses the text from the hash box plus this secret.
- HMAC-MD5
- HMAC-SHA-1
- HMAC-SHA-256
- HMAC-SHA-384
- HMAC-SHA-512
AES encrypt / decrypt
Password-based AES-256. Output includes salt and IV so this page can decrypt it. GCM is preferred.
How to use
Paste text to get hashes as you type. Add a secret for HMAC. For AES, choose a mode, set a password, then encrypt or decrypt. Ciphertext is packaged with salt and IV so it can be decrypted on this page.
FAQ
- Hash, HMAC, or AES?
- MD5, SHA, and CRC32 are one-way. HMAC also needs a secret and is still one-way. AES is reversible encryption: the same password decrypts the result.
- Can I decrypt AES elsewhere?
- The output is an HT1 payload: PBKDF2-SHA-256 (100000 iterations) derives an AES-256 key. Other tools must use the same KDF, salt, IV, and mode. This page can decrypt its own output.
- Should I hash passwords with MD5?
- No. MD5 and SHA-1 are too fast and broken for password storage. Use Argon2, scrypt, or bcrypt on the server.