Hash Generator
MD5, SHA-1, SHA-256 and more.
Runs entirely in your browser. Nothing you enter or upload leaves your device.
What the hash generator does
A hash function turns any input, from a single word to a large file, into a short fixed-length fingerprint. Change a single character and the fingerprint changes completely. This tool creates MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes of text or files, all at once.
The most common reason to use it is checking a download: software publishers list a SHA-256 value, and if your copy gives the same hash, it arrived intact and unaltered. Developers also use hashes to compare two large files without opening them, to build cache keys, or to confirm that an API signs the exact bytes they expect.
How to use the hash generator
- Type text, or drop a file onto the drop area.
- All five hashes appear at once. Use the copy button beside each one.
- To check a download, paste the published hash into Compare with a known hash. The tool tells you whether it matches.
Understanding the results
Each algorithm gives a hash of a different length in hexadecimal: 32 characters for MD5, 40 for SHA-1, 64 for SHA-256, 96 for SHA-384 and 128 for SHA-512. That’s a handy way to tell which kind a published checksum is. The compare box checks your value against all five, ignores capital letters, and names the algorithm that matched. A match means the bytes are identical. No match means something differs, even if only a trailing space or a single byte of a file.
MD5 and SHA-1 are fine for spotting accidental damage, but people can deliberately craft two different inputs with the same hash, so don’t rely on them where tampering matters. For a quick integrity check, SHA-256 is the usual choice. The line above the hashes shows how many bytes of text, or which file, went in, which helps when two tools disagree. Files up to 500 MB can be hashed, with MD5 available for files up to 200 MB.
Questions
Which hash should I use?
SHA-256 for checksums and general use. MD5 and SHA-1 are broken for security purposes; they are included only to check older published checksums.
Can I hash a password with this?
Not for storing passwords. Password storage needs a slow, salted algorithm such as Argon2 or bcrypt, run on your server.
Is text hashed as UTF-8?
Yes. The same text always gives the same hash as other UTF-8 tools such as sha256sum.
Are files uploaded?
No. Files are read and hashed in your browser. The SHA hashes use your browser’s Web Crypto feature; MD5 uses a small built-in routine, because Web Crypto doesn’t offer it.
Why doesn’t my hash match the one from the command line?
Usually a hidden newline. echo "text" | sha256sum hashes the text plus a line break. Use printf "text" or echo -n to hash the text alone.