Cryptography tools
Which algorithm for which job, and what each digest is safe for.
Hashing a password with SHA-256 is fast, which is exactly what makes it the wrong choice. These tools identify a hash or a password hash from its shape alone, compute digests with the Web Crypto API in your browser, and say which algorithm belongs to which job: bcrypt, scrypt or Argon2 for passwords, SHA-256 for integrity, HMAC for authentication, and why MD5 and SHA-1 survive in checksums but not in signatures.
Free, with no sign-up. Every one runs entirely in your browser: nothing you paste is uploaded, and there is no server to send it to.
Hash Generator
MD5 through SHA-512, and which to trust
Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests of any text in your browser.
Which Algorithm Should I Use?
The right one, and the wrong ones
Which cryptographic algorithm for which job, with real parameters: password storage, API keys, encryption at rest, signing, key derivation, MACs and randomness.
Hash Identifier
Length narrows it. Nothing identifies it
Identify a hash from its length, with every algorithm that shares it, because SHA-256, SHA3-256 and BLAKE2s-256 are all 32 bytes.
Password Hash Inspector
Is the cost actually adequate?
Read a bcrypt, Argon2, PBKDF2 or shadow hash and get its real cost parameters, plus the bcrypt limit that silently truncates at 72 bytes.