Generate SHA hashes, bcrypt password hashes, file checksums, and RSA key pairs locally in your browser. Nothing is uploaded.
All hashing runs via Web Crypto and bcryptjs. Your input never leaves your device — no server receives your data.
SHA-256, SHA-512, MD5 (checksum use), bcrypt password hashing, and RSA-2048/4096 key pair generation — all in a single browser-based tool.
Online Hash & Bcrypt Generator exists to hash text or files in the browser with SHA-256, SHA-512, MD5, or bcrypt, and generate an RSA key pair without uploading the input. It is not a second copy of the tool homepage. The homepage introduces the whole product. This page stays on one job so a search for that job lands on instructions you can follow without hunting through other tabs. Read the result on this page against the input you actually used. A screenshot without the input is not evidence. If the result surprises you, change one thing and run it again before you change your VPN, browser, or server config.
Work through Online Hash & Bcrypt Generator in order. 1. Pick the algorithm that matches the job. Checksums are SHA-256. Passwords are bcrypt, not SHA. 2. Paste text or drop a file. 3. Copy the digest. 4. Compare it to a published value or to a second machine. Write down the input and the output together. When you ask someone for help, send both. Repeat the same input once. A stable tool returns the same answer. If it does not, the input changed or the page is talking to a different network path than you think.
A hash is not encryption. You cannot decrypt it. MD5 is for legacy checksums, not for new security designs. Nothing on this page stores a password for your account. Treat the output as a measurement, then decide. RookVPN does not log the contents of a client-side tool, and a measurement is not a promise that every other app on the device behaves the same way. Compare a second path when the decision matters: a terminal command, another browser, or the matching guide linked below.
Example: a download page publishes a SHA-256. You hash the file on the file page and the hex matches. You install it. If you needed to store a password, you leave this homepage and open bcrypt. SHA-256 of a password is the mistake this site is built to steer you away from.
After you finish Online Hash & Bcrypt Generator, open the SHA-256, bcrypt, or file page for the one algorithm you need if the next question is different from the one this page answers. Stay here if you are still on the same job. Extra pages help only when they answer a new question, such as a different algorithm, a different leak channel, or a different file type. The documentation link on this page is the long form of the same workflow, including the checks that do not fit in the tool UI.
Use Online Hash & Bcrypt Generator for one job: to hash text or files in the browser with SHA-256, SHA-512, MD5, or bcrypt, and generate an RSA key pair without uploading the input. Bring the before-and-after evidence with you if you change a setting. A VPN icon, a decoded token, a generated password, or a stripped file is not finished until you have checked the output the way this page describes. Then follow the related guide for the long version, and the sibling tool only when the next job is actually different. Keep secrets out of the same message as the link or the file that needs them. If a second run does not match the first, stop and find what changed instead of publishing the first result.
Example: a download page publishes a SHA-256. You hash the file on the file page and the hex matches. You install it. If you needed to store a password, you leave this homepage and open bcrypt. SHA-256 of a password is the mistake this site is built to steer you away from. Work the page in this order: Pick the algorithm that matches the job. Checksums are SHA-256. Passwords are bcrypt, not SHA. Paste text or drop a file. Copy the digest. Compare it to a published value or to a second machine. Limits that still apply after a clean result: A hash is not encryption. You cannot decrypt it. MD5 is for legacy checksums, not for new security designs. Nothing on this page stores a password for your account.
Yes — free at rookvpn.com/hash with no account required.
No. All hashing runs client-side using Web Crypto and bcryptjs. Nothing leaves your browser.
No. Hashing runs in the browser.
Bcrypt on the bcrypt page. Not SHA-256 and not MD5.
The one the publisher printed, usually SHA-256.
No.