About the SHA-3 and RIPEMD-160 Hash Calculator
Browsers only include the SHA-1 and SHA-2 family, so this calculator supplies the hashes they leave out: SHA3-224, SHA3-256, SHA3-384, SHA3-512, Keccak-256, SHA-224, RIPEMD-160, MD4 and MD2. For text it also shows the NTLM hash that Windows uses for passwords. Type text or pick a file to see every result at once, tick HMAC to add a secret key, and paste a known hash to learn which algorithm it came from. All work is done in the page on your device. For MD5, SHA-1, SHA-256 and SHA-512, use the Hash Generator.
Updated September 2026
How to use the SHA-3 and RIPEMD-160 Hash Calculator
- 1Choose Text or File.
- 2Type your text, or pick a file of up to 100 MB.
- 3Read the hashes that appear below. Tick Uppercase if you need capital letters.
- 4Tick HMAC and enter a secret key to get keyed hashes instead.
- 5Paste a hash into the compare box to see which algorithm it matches.
When you need these hashes
Most people only need SHA-256, but several fields use others. Blockchain tools use Keccak-256 and RIPEMD-160 to derive addresses. Some download pages publish SHA3-256 checksums. Older systems, network captures and Windows credential files use MD4 and NTLM. Having them all in one place saves installing command line tools.
Picking an algorithm
- SHA3-256 or SHA3-512: a modern choice when a standard or a vendor asks for SHA-3.
- Keccak-256: smart contracts and Ethereum tooling.
- RIPEMD-160: Bitcoin-style addresses, where it is applied after SHA-256.
- SHA-224: a shorter relative of SHA-256, used by some protocols and certificates.
- MD4, MD2, NTLM: compatibility with old data only. They are not safe for passwords.
Checking a result
If your hash does not match another system, look at hidden differences first. A trailing space or line break changes everything, and so does a different text encoding. Text is hashed as UTF-8 exactly as typed. Also check that both sides use the same SHA-3 variant, since Keccak-256 and SHA3-256 differ. The compare box tells you when your value matches a different algorithm.
To confirm that a whole download is intact, pick the file on the File tab and compare with the published value.
Privacy and speed
Nothing you type or choose leaves your device. Short text is hashed instantly. A 100 MB file can take several seconds on a phone because the hashes here are computed in JavaScript. See also the Base64 Encoder and Decoder and the Password Generator for related everyday tasks. For the common ones use Hash Generator, and to encode a result use Base64 Encoder & Decoder.
Features
- SHA3-224, SHA3-256, SHA3-384 and SHA3-512, checked against NIST values and Node's crypto library
- Keccak-256 with the original padding used by Ethereum
- SHA-224, RIPEMD-160, MD4 and MD2, checked against the published test vectors
- NTLM hash of a text password
- HMAC with a text key for every algorithm
- Files up to 100 MB, read on your device
Frequently asked questions
What is the difference between SHA-3 and Keccak-256?
Keccak is the algorithm that won the SHA-3 competition. NIST made small changes to its padding when it became the SHA-3 standard, so the two give different results for the same input. Ethereum uses the original Keccak-256, which is why the two are listed separately here.
Is SHA-3 better than SHA-256?
Neither is broken. SHA-3 works in a different way from SHA-2, so a weakness found in one would probably not affect the other. SHA-256 is far more widely supported, while SHA-3 is a good choice when a specification asks for it.
What is an NTLM hash?
NTLM is the format Windows uses to store account passwords. It is the MD4 hash of the password written in UTF-16, shown here in capitals by convention. It has no salt and is weak, so it is shown for testing and recovery work on systems you own, not as a way to store passwords.
Should I use MD4 or MD2 for anything?
Not for security. Both are broken and only remain for compatibility, such as checking old data or NTLM. For new work use SHA-256 or SHA-3.
What does the HMAC option do?
HMAC mixes a secret key into the hash so that only someone with the key can produce the same value. It is used to sign messages and web hooks. The key here is typed as text and used as UTF-8 bytes.
Is my file or text uploaded?
No. The hashes are calculated by code running in your browser. Large files take longer because this code is slower than the built-in browser hashes, which is why there is a 100 MB limit.