Hash Generator
Generate MD5, SHA-1, SHA-256, and SHA-512 hashes from any text input. All hashes are computed in your browser using SubtleCrypto (SHA variants) and a pure JavaScript MD5. No data is sent to any server.
Best for: Generating an MD5 or SHA-256 checksum to verify a download, and producing SHA-1 or SHA-512 digests for comparison against a known value
Limitations: Hashes pasted text rather than uploaded files, so verifying a large binary means using a command line tool instead
Best suited for: Developers and sysadmins spot-checking a string hash without installing anything
How to Use
Hash Output Lengths
Hash functions take any input of any length and produce a fixed-length digest. The same input always produces the same digest, and changing even one character in the input produces a completely different digest. This property, called the avalanche effect, makes hashes useful for checksums and integrity verification. Hashes are one-way functions, you cannot compute the original input from the hash output.
SHA-256 is the current standard for most security applications. SHA-512 provides a larger output and is preferred where maximum security is required. MD5 and SHA-1 should not be used for any security purpose, but MD5 remains useful for fast non-security checksums such as detecting file corruption during download.
Frequently Asked Questions
What is a cryptographic hash?
A hash function converts any input into a fixed-length output called a digest. The same input always produces the same hash, and any change to the input produces a completely different hash. Hashes are one-way, you cannot reverse a hash to recover the original input.
What is SHA-256 used for?
SHA-256 is used in Bitcoin and most cryptocurrencies, TLS/SSL certificates, code signing, and file integrity verification. It produces a 256-bit (64 hex character) output and is considered secure for current use. It is the most widely used member of the SHA-2 family.
Is MD5 safe to use?
MD5 is not safe for security purposes. Known collision attacks allow two different inputs to produce the same MD5 hash, making it unsuitable for digital signatures or password hashing. MD5 is still used for non-security checksums like verifying that a file was not corrupted during download.
Can I use this to hash passwords?
No. SHA-256 and SHA-512 are fast hash functions, which makes them unsuitable for password storage. Passwords should be hashed with slow, purpose-built algorithms like bcrypt, scrypt, or Argon2, which are designed to resist brute-force attacks by being computationally expensive.
Is my data sent to a server?
No. SHA-1, SHA-256, and SHA-512 are computed using the browser's SubtleCrypto Web API. MD5 is computed using a pure JavaScript implementation. No data is ever uploaded or sent anywhere.