Hash Generator (MD5, SHA-256)
Calculate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes of text or files, then copy them as hex or Base64 or compare them with a published checksum. Files never leave your device.
- Five hash algorithms at once
- Text or local file input
- Checksum compare built in
Input
What do you want to hash?
Hashes are exact to every byte: spaces, trailing new lines and letter case all change the result.
Hashes
Type some text to see its hashes.
MD5 128-bit
–
SHA-1 160-bit
–
SHA-256 256-bit
–
SHA-384 384-bit
–
SHA-512 512-bit
–
MD5 and SHA-1 are broken for security purposes. Use them only for checksums and legacy compatibility, and prefer SHA-256 or stronger for anything security related.
How to use
How to Generate a Hash
- 1
Choose text or file
Type or paste text, or switch to File and pick or drop a file from your device.
- 2
Read the hashes
All five hashes are calculated together. Pick lowercase hex, uppercase hex or Base64 output.
- 3
Compare a checksum
Paste an expected hash to confirm the input matches, for example after downloading a file.
- 4
Copy the result
Use the copy button next to any algorithm to put that hash on your clipboard.
Hash Algorithms Compared
A cryptographic hash turns any input into a fixed-length fingerprint. The same input always gives the same hash, and changing a single byte gives a completely different one.
| Algorithm | Bits | Hex length | Collision resistance | Typical use |
|---|---|---|---|---|
| MD5 | 128 | 32 | Broken (collisions) | Legacy checksums, cache keys, deduplication |
| SHA-1 | 160 | 40 | Broken (collisions) | Legacy systems, Git object IDs |
| SHA-256 | 256 | 64 | Secure | File integrity, signatures, blockchains |
| SHA-384 | 384 | 96 | Secure | TLS cipher suites, Subresource Integrity |
| SHA-512 | 512 | 128 | Secure | Integrity checks, often fast on 64-bit CPUs |
Worked Example: Hashing "abc"
The three bytes 61 62 63 (the UTF-8 text abc) are a standard test vector from RFC 1321 and FIPS 180. Type abc into the tool and you should see:
MD5
900150983cd24fb0d6963f7d28e17f72
SHA-1
a9993e364706816aba3e25717850c26c9cd0d89d
SHA-256
ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad
Typing abcfollowed by Enter hashes four bytes (with a newline) and gives entirely different values, which is the most common reason two hashes of "the same" text do not match.
Common Use Cases
Verifying downloads
Check an ISO, installer or archive against the SHA-256 checksum on the vendor's site.
Detecting changes
Compare the hash of a file before and after transfer to confirm nothing changed.
Cache keys and ETags
Create a short, stable fingerprint of content for caching or deduplication.
Debugging integrations
Confirm what an API or webhook expects when it sends or checks a hash of a payload.
FAQ
Frequently Asked Questions
How do I generate a SHA-256 or MD5 hash?
Type or paste text into the box, or switch to File and choose a file. The MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes are calculated at the same time and can be copied as lowercase hex, uppercase hex or Base64.
Are my files uploaded to a server?
No. Files are read and hashed locally in your browser. SHA hashes use the browser's built-in Web Crypto API and MD5 uses a small JavaScript implementation included in the page. The file size limit is 512 MB because the whole file is read into memory.
How do I verify a downloaded file's checksum?
Choose the downloaded file, then paste the checksum published by the vendor into the Compare field. The tool checks it against every computed hash, ignoring letter case and spaces, and tells you which algorithm matched or that nothing matched.
Why does my hash differ from another tool?
Hashes change if even one byte changes. Common causes are a trailing newline, different line endings (Windows CRLF versus LF), extra spaces, or a different text encoding. This tool hashes text as UTF-8, and line breaks typed into the text box are hashed as LF.
Is MD5 or SHA-1 secure?
No. Practical collision attacks exist for both, so they should not be used for digital signatures, certificates or password storage. They remain fine for non-adversarial checksums. Use SHA-256 or SHA-512 for integrity checks that matter, and a dedicated password hashing algorithm such as Argon2, bcrypt or scrypt for passwords.
Can a hash be reversed to get the original text?
No. Hash functions are one-way. The only way to find an input for a given hash is to guess inputs and compare, which is why short or common strings can be found in lookup tables. That is also why plain hashes are not suitable for storing passwords.
Keep going
Related Tools
Hand-picked tools that pair well with this one. All free, no sign-up.
- Developers
Base64 Encoder / Decoder
Convert text, files, and images to and from Base64 with live previews and MIME detection.
- Text and file modes
- Image preview
- URL-safe option
Open tool - Developers
UUID Generator
Generate random v4 and time-ordered v7 UUIDs in bulk, then copy or download them, or validate any UUID.
- v4 & v7 UUIDs
- Bulk up to 1000
- UUID validator
Open tool - Developers
JWT Decoder
Decode JSON Web Token headers and payloads instantly, with readable expiry times and token status, right in your browser.
- Header & payload
- Expiry status
- Runs locally
Open tool