Understanding Cryptography Tools
Native Web Crypto API
This tool uses the window.crypto.subtle interface built into every modern browser. It processes large files and complex hashes natively — no third-party servers or heavy external scripts required. MD5 uses a small CryptoJS fallback since the Web Crypto API does not support MD5 natively.
Verifying File Integrity
When you download a software installer or ISO, the developer often publishes a SHA-256 checksum on their website. Drop your downloaded file into the File Checksum tab to instantly verify the hash matches — confirming the file was not corrupted or tampered with.
Frequently Asked Questions
Which algorithm should I choose?
For modern security use cases, choose SHA-256 or SHA-512. MD5 and SHA-1 are considered cryptographically broken and should only be used when required for compatibility with legacy systems — never for passwords or new security implementations.
How does the HMAC Generator work?
HMAC (Hash-based Message Authentication Code) is used in API security — such as Stripe and GitHub webhooks. It combines your payload with a secret key. The receiving server performs the same computation; if the resulting signatures match, it proves both that the data is authentic and that the sender knows the secret key.