About HashForge

Cryptography utilities with privacy at their core.

Hashing is not encryption

A cryptographic hash is a one-way fingerprint: the original input cannot feasibly be recovered. Encryption is reversible using a key. Hashes help verify integrity and, when used with a password hashing function, protect password verifiers.

Password hashing guidance

Use Argon2id where available; bcrypt and scrypt are strong alternatives. Always use a unique salt and a work factor appropriate for your environment. Do not use fast digests such as MD5 or SHA-256 directly for password storage.

Privacy policy

HashForge does not use a database. API input, hashes, secret keys and uploaded files are processed only in memory and are not stored or included in application logs. Reverse proxies should also be configured without request-body logging.

Security disclaimer

This toolkit is an aid, not a substitute for a security review. Validate your threat model and use current standards for production systems.