Input
Result
Method—
Length0
Status—
How the hash generator works
In Generate you pick a method, type the text and get the hash. In Verify you paste a hash and a list of candidates: the tool recomputes each candidate until one matches. There is no decryption: the same text yields the same hash, and the inverse is only trial and check.
The test examples (hello, the demo password) cover hashes made here. For an unknown hash, you supply the candidates. HMAC needs the key; PBKDF2 needs the salt and the iteration count.
Generate
Text → hash
MD5, SHA, HMAC, PBKDF2 or bcrypt, with salt or key when the method needs them.
Verify
Hash → candidate
Compare the hash with your list. If one matches, that is the text.
Limit
No decryption
A hash cannot be inverted mathematically. Without the right candidate, the result stays empty.
Important:
Do not use this on production passwords or hashes that are not yours. Verification is for your own tests, in the browser.
Useful notes
- The MD5 of “hello” is 5d41402abc4b2a76b9719d911017c592. With test examples checked, Verify finds it immediately.
- bcrypt is slow: keep the candidate list short. The salt is already inside the $2a$ string.
- HMAC cannot be checked without the original key, even if you have the right password.
- PBKDF2 will not match without the same salt and the same iteration count.
- Nothing is saved on the server. If you reload the page, the fields clear.