Hash Generator
Generate MD5, SHA-1, SHA-256, SHA-512 and other hashes.
Paste any text and instantly get its MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests side by side. Useful for verifying downloads against a published checksum, computing content-addressed identifiers, and quickly comparing whether two payloads are bit-for-bit identical.
Common use cases: validating release artifacts (the SHA-256 next to the download link), generating cache keys, deduplicating uploads by content hash, and producing ETags. For password storage, use a slow KDF like argon2id — not a raw hash.
Input
Results
Enter text to generate hashes
Frequently asked questions
Which hash algorithm should I use?
For integrity checks and content addressing, SHA-256 is the sensible default. MD5 and SHA-1 are fine for non-security uses like cache keys but are broken for anything where collisions matter. SHA-512 is faster than SHA-256 on 64-bit systems if output length is not a concern.
Can I use this to hash passwords for storage?
No — plain hashes (even SHA-256) are far too fast and let attackers brute-force common passwords on consumer GPUs at billions per second. Use a slow, memory-hard function like argon2id, bcrypt, or scrypt server-side. This tool is for checksums and integrity, not credential storage.
Why does the same input always produce the same hash?
That's the defining property of a hash function — deterministic, one-way, fixed-length output. It's why hashes work for integrity (any byte change produces a wildly different output) and content addressing (the hash is the canonical name of the content).
Are MD5 and SHA-1 "broken"?
Collisions have been demonstrated cheaply for both, so they should not be used where an attacker could construct a malicious payload with the same hash as a legitimate one (signatures, certificates, content tampering). For uses where collisions don't matter — cache keys, deduplication identifiers — they're still fine.
Is the input transmitted anywhere?
No. Hashes are computed in your browser via the Web Crypto API. Nothing is uploaded.