How do I generate an MD5 or SHA-256 hash online for free?

Type text or select a file to compute MD5, SHA-1, SHA-256 and other hashes instantly in your browser.

Can I encrypt or decrypt with AES or RSA right here?

Yes, it supports AES (GCM/OAEP) and RSA encryption and decryption plus key generation, all client-side.

Is my data safe when hashing or encrypting here?

Everything runs locally in your browser; your text and files are never uploaded to a server.

AES & RSA Encryption, Key Generator & File Hash

Generate AES and RSA keys, encrypt or decrypt with AES-GCM / AES-CBC / RSA-OAEP, and compute MD5 / SHA-1 / SHA-256 / SHA-384 / SHA-512 fingerprints for text or whole files — just drag a file in. Everything runs locally: nothing is ever uploaded.

Generate an AES key

Cryptographically random key material — use it with the encrypt/decrypt form below or anywhere a raw AES key is needed.

Key size Format

AES encrypt / decrypt

Mode Key encoding Data encoding (ciphertext)

Key (raw bytes)

IV / nonce (same encoding as the key)

Plaintext Ciphertext

Generate an RSA key pair

Key size

Public key (PEM)

Private key (PEM)

⚠ The private key never leaves this page — but once you copy it, treat it like a password.

RSA encrypt / decrypt (OAEP + SHA-256)

Public key (PEM) Message Ciphertext (Base64)

Private key (PEM) Ciphertext (Base64) Plaintext

Text hash

Text

File fingerprint

Drag & drop a file (or click to browse). The hash is computed on your device — the file is never uploaded.

Drop a file here
or click to choose one

AES encryption & key generator, in your browser

This tool generates cryptographically random AES keys (128 / 196 / 256-bit) and performs real AES-GCM or AES-CBC encryption and decryption using the Web Crypto API. GCM is the modern default: it authenticates the ciphertext, so any tampering or a wrong key/IV fails loudly instead of producing garbage. Because everything runs locally, you can encrypt sensitive text without it ever touching a server — ideal for sharing secrets over chat, embedding credentials in files, or testing crypto code.

RSA key pair generator & OAEP encryption

Generate 2048-, 3072- or 4096-bit RSA key pairs as standard PEM (SPKI public / PKCS#8 private) and encrypt or decrypt with RSA-OAEP using SHA-256. OAEP is the recommended padding scheme — unlike raw RSA or PKCS#1 v1.5, it is secure against chosen-ciphertext attacks. Note that a single RSA block can only hold a small message (about 190 characters for a 2048-bit key); for longer data, the standard practice is hybrid encryption: encrypt your data with a random AES key, then encrypt just that key with RSA.

MD5 & SHA file fingerprinting

Compute MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests for any text or whole file. Drag a file in and you get its fingerprint instantly — the same values as md5sum, sha256sum or certutil -hashfile. Use it to verify downloads, detect duplicate files, check whether an update changed your binaries, or produce a stable identifier for content. SHA-256 is the de-facto standard for file integrity; MD5 and SHA-1 remain common in legacy systems but should not be trusted for security purposes.

Frequently asked questions

Is my data uploaded anywhere?
No. Key generation, encryption and hashing all happen in your browser with the Web Crypto API. Close the tab and nothing persists.

Why did decryption fail even though I used the same key?
AES-GCM also needs the exact IV/nonce that was used to encrypt (and CBC needs the exact 16-byte IV). Store the IV next to your ciphertext — it is not secret, but it must match.

Can I use these keys with other software?
Yes. The AES output is raw key bytes in hex or Base64; RSA keys are standard PEM that OpenSSL, Java, .NET and most crypto libraries accept directly.

Which hash should I use for a file fingerprint?
SHA-256 — it is collision-resistant and universally supported. Use MD5 only when a legacy system explicitly requires it.