MD5 SHA Hash Generator
Generate hashes
Generate hashes Runs locally in your browser
About the
The Hash Generator computes MD5, SHA-1, SHA-256 and SHA-512 digests of any text, in your browser, and shows all four at once so you can compare them. A hash is a fixed-length fingerprint: the same input always gives the same output, and changing one character produces a completely different digest. That makes it useful for verifying downloads and for reproducing a value a system expects. It is emphatically not encryption, because a hash cannot be reversed, and MD5 and SHA-1 are no longer considered safe against deliberate collision attacks.
Where people use the
- Verifying a downloaded file against a published checksum.
- Reproducing a hash value that an API signature requires.
- Checking that two copies of a string are byte-identical.
- Learning how a single character change alters an entire digest.
How to use the
- 1
Enter the text
Paste anything from a single word to a whole document. Whitespace and capitalisation are part of the input, so an extra space changes the result.
- 2
Generate
All four digests are computed at once. MD5 runs locally in JavaScript; the SHA family uses the browser's own crypto.subtle implementation.
- 3
Compare against the published value
A checksum matches exactly or it does not. There is no partial match and no tolerance.
- 4
Copy the digest you need
Each row has its own copy button, so you get the right algorithm without re-reading the list.
Tips and best practices
- Never use a plain hash for passwords; use a salted, slow key-derivation function.
- Match the algorithm to what the other system expects; a correct SHA-256 is still wrong if MD5 was requested.
- Watch for trailing newlines when a checksum does not match.
Frequently asked questions
Can a hash be reversed?
No. A digest throws away information: SHA-256 compresses arbitrarily long input into 256 bits. The only way back is to guess inputs and compare, which is why hashing is not encryption and must not be used to store recoverable secrets.
Is MD5 safe to use?
Not for security. Practical collision attacks against MD5 have existed for years, and SHA-1 collisions have been demonstrated publicly. Use MD5 only for non-adversarial checksums, legacy compatibility, or matching a value an old system already produced. For anything security related use SHA-256 or SHA-512, and for passwords use bcrypt, scrypt or Argon2 with a salt.
Why does my hash not match the one on the download page?
Almost always because the input differs. A trailing newline, a different line ending, or a BOM at the start of the file all change the digest. Hash the exact bytes, not a retyped copy.
How is a file checksum different from this?
This tool hashes text you paste. A file checksum hashes the raw bytes on disk. For a large file, use a command-line tool such as sha256sum rather than pasting the contents.
Is the text sent to a server?
No. MD5 is computed in JavaScript here and the SHA family uses the browser's Web Crypto API, so the input never leaves your device. That is why you can safely hash credentials you are testing with.
What does the hash length mean?
It is fixed per algorithm: 32 hex characters for MD5, 40 for SHA-1, 64 for SHA-256 and 128 for SHA-512. A longer digest means a larger output space, not a stronger guarantee by itself.