Bob's Multi Tool

Hash Generator

hash generatorsha256 generatorsha256 checksum reportmd5 generatorPrivacy: Browser local

Hash Generator

Generate MD5, SHA-1, SHA-256, SHA-512, HMAC signatures, and a safe signature report locally.

Input / Output

Start with the tool

Input, output, and copy actions stay in this main surface. Examples and reference checks are separated below.

Copy-ready output

Local session

Input state is saved only in this browser so you can restore the last workspace without an account.

Review after the result

Open examples, checks, and related tools only after the primary input/output flow is done.

Web operations workbench

Verify a webhook signature

Generate the HMAC output, copy a safe signature report, and inspect payload shape or encoding before changing webhook code.

3 Tools
  1. 1. Hash

    Generate digest or HMAC output and copy the signature report without raw input or secrets.

  2. 2. JSON

    Check whether the webhook body shape or whitespace changed before signing.

  3. 3. Base64

    Inspect Base64 or Base64URL encoded bodies and signatures when the webhook provider uses encoded values.

Generate a secure token

Create random session/API/CSRF values, copy a safe token report, compare hashes, and choose identifiers deliberately.

3 Tools
  1. 1. Token

    Generate URL-safe session, API, CSRF, or webhook tokens and copy a report without exposing the token value.

  2. 2. Hash

    Compare digest or HMAC output for signatures.

  3. 3. UUID

    Use UUIDs for identifiers, not as secrets.

Create a safe password handoff

Generate a password or passphrase, copy a report without the secret value, then choose tokens and hashes deliberately.

3 Tools
  1. 1. Password

    Generate a password or passphrase and copy a report without exposing the secret value.

  2. 2. Token

    Use random tokens for API, session, CSRF, or webhook secrets instead of reusing passwords.

  3. 3. Hash

    Use hashes or HMAC only for checksum and signature workflows, not password storage.

Before copying

  • Normalize the input text exactly as the target system will read it.
  • Choose SHA-256 or SHA-512 for modern checksum work unless compatibility requires another algorithm.
  • Use HMAC mode when comparing webhook signatures or keyed API payloads.

Common failure cases

  • Hashes are not encryption and should not be used as password storage by themselves.
  • Hidden newlines, spaces, or Unicode normalization change the resulting hash.

Related tools

Base64Encode, decode, inspect, and copy a safe payload report for Base64, Base64URL, image data URLs, JSON payloads, and JWT segments locally in the browser.Next step: Decode copied Base64 payloads from logsTokenGenerate secure random hex, Base64, and URL-safe tokens with a safe handoff report.Next step: Generate local session or refresh tokensPasswordGenerate strong random passwords or memorable passphrases with a safe handoff report.Next step: Create local test credentials or temporary account secrets
  • Normalize the input text exactly as the target system will read it.
  • Choose SHA-256 or SHA-512 for modern checksum work unless compatibility requires another algorithm.
  • Use HMAC mode when comparing webhook signatures or keyed API payloads.
Hash Generator - Free Online Security Tool | bobob.app