Hash Generator (MD5, SHA-256)
Generate MD5, SHA-1, SHA-256 and SHA-512 hashes from text online free — for checksums and verification. No upload required — instant, private, in-browser.
What this tool can and cannot do
This generator produces a hash from your input. It cannot reverse a hash back into the original text — hashing is one-way by design, so this tool does NOT crack or decrypt hashes. MD5 and SHA-1 are shown for checksum compatibility only; both are cryptographically broken and must not be used for passwords or digital signatures. Use SHA-256 or SHA-512 for anything security-related.
Hash Generator — 5 algorithms • Local
Type or paste any text and get its digest in five algorithms at once: MD5, SHA-1, SHA-256, SHA-384, and SHA-512. SHA hashing uses your browser's native Web Crypto engine; MD5 uses the widely-trusted js-md5 library (MIT).
How to use this tool
- Paste the text you want to hash.
- Click Generate hashes.
- Copy the digest you need — each algorithm has its own copy button.
Hashes are computed over the exact UTF-8 bytes of your input — so results match what md5sum/shasum produce for the same text on the command line.
A word of caution: MD5 and SHA-1 are cryptographically broken and included only for checksums and legacy interop. Use SHA-256 or better for anything security-related, and never plain hashes for passwords (use bcrypt/argon2).
Frequently Asked Questions
Why does my hash differ from another site's?
Almost always trailing whitespace or line endings — hashing is byte-exact, so even an invisible newline changes everything. Try trimming your text, and make sure both tools use the same encoding (UTF-8 is standard).Can I hash a file?
Yes! Switch to the ‘File’ tab in the tool to upload any file (image, PDF, binary, etc.) and instantly get MD5, SHA-1, SHA-256, SHA-384, and SHA-512 checksums — entirely in your browser.Is my text or file uploaded to a server?
No. Everything runs locally in your browser using the Web Crypto API and js-md5. The data you paste or upload never leaves your device. You can even use the tool offline once the page has loaded.Is there a size or usage limit?
No accounts, no daily quotas, no paywalls. Very large inputs are only limited by your device's available memory.Which hash algorithm should I use?
For data integrity checks (downloads, backups): SHA-256 is the modern standard. For verifying legacy checksums: MD5 or SHA-1. For secure password storage: use bcrypt, argon2, or scrypt — never plain hashes. SHA-384 and SHA-512 are used in high-security contexts like TLS certificates.What is a hash collision and why does it matter?
A collision happens when two different inputs produce the same hash output. MD5 and SHA-1 are collision-prone and should not be used for digital signatures or security tokens. SHA-256 and above remain collision-resistant for practical purposes.How do I verify a file download with a hash?
The file provider publishes a SHA-256 checksum alongside the download. After downloading, hash the file here (File tab), then compare the output character-by-character with the published checksum. Any mismatch means the file was corrupted or tampered with.Are MD5 and SHA-1 totally broken and unusable?
They are broken for cryptographic security (forged signatures, certificate attacks) but remain useful for non-security tasks: detecting duplicate files, fast cache keys, legacy system checksums, and CMS content fingerprinting.