Hash generator
Find the endpoint you’re building and get its exact hash, or check the hash on a callback you received. It runs entirely in your browser: nothing you type is sent anywhere.
Use Sandbox keys onlyNever paste a Live hash key into any website, including this one. In production, always compute hashes on your server, never in a browser or mobile app.
How to use it
Find your endpoint
Search by product, task or endpoint, such as transfer, refund or /status, or filter by product.
Enter your values
Type each value exactly as it appears in your request or callback, in the order shown. Leave a field empty if you don’t send it.
Add your Sandbox hash key
It stays in your browser and is cleared when you close the tool.
Generate or check the hash
For a request, copy the hash into your hash header. For a callback, paste the hash you received to see whether it matches.
Hashing rules
Join with no separators
Put the values one after another, in the order shown, then your hash key at the end.
Empty for missing fields
If you don’t send an optional field, use an empty string in its place. Never skip it.
Use values exactly as sent
Amounts and dates must match character for character, such as 1,000.00 in Subsidiary Accounts callbacks or 2026-11-03 11:02:25.56 in transfer notifications.
Lowercase hex
The result is a 128-character lowercase hexadecimal string.
Hash doesn’t match? Compare your string with the tool’s “String to hash”, character by character. The usual causes are a field in the wrong order, a reformatted amount or date, or a missing empty string. See Authentication.
Put it in your code
The tool shows copy-ready code for the selected endpoint in Node.js, Python, PHP, Java and C#. The same code is on every endpoint in the API reference, next to its request samples.
Need help? We’re here 24/7
Talk to our support team any time, or ask questions in the developer community.
Updated 1 day ago