Developer tool

Hash Generator

Generate non-password digests (SHA family and friends) for checksums and fingerprinting.

How it works

What it does

The Hash Generator computes common cryptographic digests over pasted text for checksums, cache keys, and fingerprinting workflows. It clearly distinguishes these digests from password hashing.

When to use it

  • Verifying a downloaded artifact checksum
  • Building stable fingerprint demos for content strings
  • Comparing PHP hash() output with another language

How input is processed safely

Input text is hashed in memory under size limits and returned as hex/digest output. No password-storage recommendation is made for SHA/MD5-style digests. Nothing is written to disk as your permanent vault.

Examples

  • SHA-256 of a config canonical string
  • Comparing two payloads’ digests after normalization
  • Demonstrating why MD5 is unsuitable for security-sensitive integrity in modern systems

Common mistakes

  • Using SHA-256 alone to “hash passwords”
  • Hashing secrets and pasting both secret and digest into public tickets
  • Assuming hashing equals encryption

Checksums answer “is this byte sequence the same?” They do not answer “is this password correct?” or “is this message confidential?” Use HMAC with a secret when you need authenticity of messages, and use password hashing APIs for credentials.

When comparing digests across languages, normalize encoding (UTF-8 vs raw bytes) and hex letter case. Many false mismatches are encoding problems, not algorithm problems.

Avoid publishing digests of secrets. Attackers can brute-force short or predictable inputs offline. For public artifact verification, publish digests of release tarballs alongside signatures from your release process.

Practical tips

  • Keep inputs small and representative; huge pastes slow feedback and raise risk of accidental secret disclosure.
  • After using Hash Generator, verify the result in your own environment (correct SAPI, correct host, correct project root).
  • Cross-link findings to ZendStudio.net PHP error guides and IDE setup pages when the next step is configuration rather than code edits.
  • Prefer repeatable project tooling (CI, Composer scripts, IDE inspections) for repo-wide enforcement; this page is for interactive problem-solving.

Privacy note

Digests of low-entropy secrets can be brute-forced. Do not hash real passwords here; use the password hash tool with test values only.

Run in browser

AJAX processing only. No remote PHP execution sandbox. Results are not indexed.

Inputs are processed for this request only and are not stored in analytics. Object unserialize and arbitrary PHP execution are blocked.

Safety notes

  • Submitted tool contents are not written to analytics or search logs.
  • This site never evaluates arbitrary PHP from the browser.
  • Generated configs are starting points—validate on a staging host before production.