Hash Generator: MD5, SHAโ1, SHAโ256, SHAโ512
Hashes are computed locally in your browser (Web Crypto API). Your text and files never leave your device.
| Algorithm | Digest |
|---|
What is a hash?
A cryptographic hash function turns data of any size into a short, fixed-length fingerprint. The same input always gives the same hash, while changing even one character produces a completely different result. Hashes are one-way: you cannot recover the original data from the digest.
Supported algorithms
| Algorithm | Output size | Hex length | Status |
|---|---|---|---|
| MD5 | 128 bits | 32 | Broken for security โ fine for non-adversarial checksums |
| SHAโ1 | 160 bits | 40 | Deprecated โ practical collisions exist |
| SHAโ256 | 256 bits | 64 | Recommended default (SHAโ2 family) |
| SHAโ384 | 384 bits | 96 | Secure |
| SHAโ512 | 512 bits | 128 | Secure, often faster than SHAโ256 on 64-bit CPUs |
Example
Hashes of the text hello (UTFโ8, no trailing newline):
| MD5 | 5d41402abc4b2a76b9719d911017c592 |
| SHAโ1 | aaf4c61ddcc5e8a2dabede0f3b482cd9aea9434d |
| SHAโ256 | 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824 |
How to verify a file checksum
- Choose the downloaded file with the file picker above.
- Compare the SHAโ256 (or the algorithm the publisher lists) with the checksum on the download page.
- If they match exactly, the file was not corrupted or tampered with in transit.
Command-line equivalents:
- Linux:
sha256sum file.iso - macOS:
shasum -a 256 file.iso - Windows:
certutil -hashfile file.iso SHA256
Storing passwords? Donโt use plain MD5 or SHA hashes โ use a slow, salted algorithm such as bcrypt, scrypt or Argon2.
Frequently asked questions
Is my data sent to a server?
No. Text and files are hashed locally in your browser with the Web Crypto API (and a JavaScript MD5 implementation). Nothing is uploaded.
Can a hash be reversed or decrypted?
No. Hash functions are one-way. Short or common inputs can sometimes be found in precomputed lookup tables, which is why passwords need salted, slow hashing.
Is MD5 still safe?
MD5 is fine for detecting accidental corruption, but it is not collision-resistant and must not be used for signatures, certificates or passwords. Use SHA-256 or stronger.
Why is my hash different from another tool?
Usually the input differs invisibly: a trailing newline (echo adds one โ use echo -n), Windows vs Unix line endings, or a different text encoding. This tool hashes text as UTF-8.
Does uppercase vs lowercase hex matter?
No. Hex digests are case-insensitive; 5D41โฆ and 5d41โฆ are the same value. Use the Uppercase option if a system expects capital letters.
Can I hash large files?
Yes, as long as your browser has enough memory to read the file. Files of a few hundred megabytes work fine on most devices.