Generate MD5, SHA-256, SHA-512 hashes, HMAC signatures, JWT secrets and UUIDs. ✓ 100% client-side
No. All hashing, token generation, and HMAC computation runs entirely in your browser using the Web Crypto API and pure JavaScript. Nothing is uploaded.
MD5 (128-bit) and SHA-1 (160-bit) are legacy algorithms considered cryptographically broken — suitable only for checksums, not security. SHA-256 and above are modern, collision-resistant algorithms recommended for security applications.
HMAC (Hash-based Message Authentication Code) combines a secret key with a message to produce a signature. Use it to verify that a message hasn't been tampered with — common in API authentication and webhook verification.
JWT secrets are generated using crypto.getRandomValues() — the browser's cryptographically secure random number generator. The output is formatted as Hex, Base64, or Base64URL, ready to use as the HS256/HS384/HS512 signing secret.
UUID v4 is a randomly generated universally unique identifier. It uses crypto.getRandomValues() to ensure high-quality randomness, making collisions extremely unlikely.