Hash Generator
Generate MD5, SHA-1, SHA-256, and SHA-512 hashes from any text input. All hashes are computed in your browser using SubtleCrypto (SHA variants) and a pure JavaScript MD5. No data is sent to any server.
How to Use
Hash Output Lengths
Hash functions take any input of any length and produce a fixed-length digest. The same input always produces the same digest, and changing even one character in the input produces a completely different digest. This property, called the avalanche effect, makes hashes useful for checksums and integrity verification. Hashes are one-way functions — you cannot compute the original input from the hash output.
SHA-256 is the current standard for most security applications. SHA-512 provides a larger output and is preferred where maximum security is required. MD5 and SHA-1 should not be used for any security purpose, but MD5 remains useful for fast non-security checksums such as detecting file corruption during download.
Frequently Asked Questions
What is a cryptographic hash?
A hash function converts any input into a fixed-length output called a digest. The same input always produces the same hash, and any change to the input produces a completely different hash. Hashes are one-way — you cannot reverse a hash to recover the original input.
What is SHA-256 used for?
SHA-256 is used in Bitcoin and most cryptocurrencies, TLS/SSL certificates, code signing, and file integrity verification. It produces a 256-bit (64 hex character) output and is considered secure for current use. It is the most widely used member of the SHA-2 family.
Is MD5 safe to use?
MD5 is not safe for security purposes. Known collision attacks allow two different inputs to produce the same MD5 hash, making it unsuitable for digital signatures or password hashing. MD5 is still used for non-security checksums like verifying that a file was not corrupted during download.
Can I use this to hash passwords?
No. SHA-256 and SHA-512 are fast hash functions, which makes them unsuitable for password storage. Passwords should be hashed with slow, purpose-built algorithms like bcrypt, scrypt, or Argon2, which are designed to resist brute-force attacks by being computationally expensive.
Is my data sent to a server?
No. SHA-1, SHA-256, and SHA-512 are computed using the browser's SubtleCrypto Web API. MD5 is computed using a pure JavaScript implementation. No data is ever uploaded or sent anywhere.