Home › Tools › Hash Generator

Hash Generator

Create MD5, SHA-1, SHA-256 and SHA-512 hashes from any text or file. Everything runs in your browser using the built-in Web Crypto API. Nothing is uploaded.

Last updated: 11 Nov 2026 Read time: 5 min Category: Developer Tools Uses: Web Crypto API
Ad placement (top)

What is a Hash

A cryptographic hash is a one-way function that condenses any input, whether a single character or a multi gigabyte file, into a fixed size fingerprint. Two properties make it useful. First, the same input always produces the same fingerprint. Second, even flipping a single bit in the input produces a completely different fingerprint. Combined with the fact that going backwards (from fingerprint to input) is infeasible, this makes hashes the backbone of integrity checks, digital signatures and content addressing.

Which Algorithm for Which Job

  • MD5: 128 bit output, fast, broken for security since 2004. Fine for a quick accidental corruption check but never for anything adversarial.
  • SHA-1: 160 bit, deprecated since 2017 when Google's SHAttered attack produced a real collision. Legacy systems may still require it.
  • SHA-256: 256 bit, part of the SHA-2 family, considered secure, the current default for most new systems.
  • SHA-512: 512 bit, often faster than SHA-256 on 64 bit CPUs because it uses 64 bit words natively.
Never store passwords with plain hashes A GPU can compute billions of SHA-256 hashes per second. Password storage needs a slow, salted algorithm such as bcrypt, scrypt or Argon2. Use a library, not a plain hash.

How to Use This Tool

  1. Pick a mode. Text pastes a string, File reads from disk.
  2. Enter or select your input.
  3. Press Generate Hashes. All four algorithms run at once.
  4. Copy any output using the button in its corner.

Verifying a Download

Most open source projects publish a SHA-256 checksum next to each release. After downloading, hash the file with this tool and compare the hex string to the published value. If they match, the file arrived intact. If they differ, the download was corrupted in transit or, worse, the file was tampered with.

Content Addressing

Git identifies every commit, tree and blob by its SHA-1 hash. IPFS, modern CDN caches and reproducible builds all use hashes as addresses. The idea is simple: the identifier is derived from the content itself, so two parties that produce the same bytes will always agree on the address without any central authority.

Privacy

Hashing runs entirely in the browser. No input, text or file, ever leaves your device. The page works offline after the first load.

Frequently Asked Questions

What is a hash function?

A one-way function that turns any input into a fixed size fingerprint.

Which algorithm should I use?

Prefer SHA-256 or SHA-512. Avoid MD5 and SHA-1 for security sensitive work.

Can two inputs share a hash?

Theoretically yes. For SHA-256 finding one is infeasible. MD5 and SHA-1 have real collisions.

Is a hash enough for passwords?

No. Use bcrypt, scrypt or Argon2 with per user salts.

Where does the hashing happen?

In your browser with the Web Crypto API.

Can I hash files?

Yes. Switch to the File tab and select a local file.

What is an HMAC?

A hash combined with a secret key, used to prove authenticity in addition to integrity.