Developer Tools
Hash Generator
Generate SHA-256, SHA-512, SHA-1 and MD5 hashes from any text, instantly in your browser.
Enter text and press Generate hashes.
What is a hash generator?
A cryptographic hash function turns any text into a fixed-length fingerprint: SHA-256 always produces 64 hex characters, SHA-512 produces 128, SHA-1 produces 40, and MD5 produces 32. The same input always gives the same output, but even a one-character change produces a completely different hash, and the process cannot be reversed. Hashes are used to verify file integrity, store passwords safely (with proper salting and slow algorithms), and fingerprint data. This tool computes all four digests instantly in your browser.
How to use this tool
- Type or paste the text you want to hash.
- Tick UPPERCASE output if you need capital hex digits.
- Press Generate hashes to compute SHA-256, SHA-512, SHA-1, and MD5.
- Use the Copy button under any hash to copy it.
Key features
- Four algorithms: SHA-256, SHA-512, and SHA-1 via the browser's native WebCrypto, plus MD5 via a built-in pure-JavaScript implementation.
- MD5 always works — even on plain http — because it needs no secure context, unlike WebCrypto.
- Clear warning when SHA hashing is unavailable (crypto.subtle requires https or localhost).
- Uppercase toggle for systems that expect capital hex.
- Per-hash copy buttons with clipboard fallback; everything runs locally.
Common use cases
- Integrity checks: comparing a downloaded file's published SHA-256 against one you compute.
- API work: generating the checksums some APIs require on request bodies.
- Development: creating deterministic IDs or cache keys from strings.
- Learning: seeing how a tiny input change avalanches into a totally different digest.
- Forensics: fingerprinting text evidence with multiple algorithms.
Practical tips
- MD5 and SHA-1 are broken for security purposes (collisions are practical) — use SHA-256 or better for anything security-related.
- Never store passwords as plain MD5/SHA-256; use a slow password-hashing function like bcrypt, scrypt, or Argon2 with a unique salt.
- Hashing is one-way: you cannot "decode" a hash back to the original text, only compare against a freshly computed one.
- Whitespace matters — a trailing newline or space changes the hash, so hash exactly the bytes you mean.
- For files rather than text, hash the file bytes with OS tools (sha256sum) or code; this tool hashes text input.
Frequently Asked Questions
What is the difference between SHA-256, SHA-512, SHA-1, and MD5?
They differ in output size and security: SHA-512 (128 hex chars) and SHA-256 (64) are currently secure; SHA-1 (40) and MD5 (32) have practical collision attacks and should not be used for security, only for checksums and legacy compatibility.
Why do SHA hashes sometimes show as unavailable?
Browsers only expose crypto.subtle in secure contexts (https or localhost). On plain http the tool shows a warning and the SHA rows stay unavailable, while MD5 — implemented in pure JavaScript — still works.
Can I reverse a hash to get the original text?
No. Hash functions are one-way by design. The only way to 'check' a hash is to hash a candidate input again and compare the two digests.
Why did a tiny change completely alter the hash?
That is the avalanche effect — a deliberate property of good hash functions where any input change, even one bit, produces an unrelated-looking output.
Is it safe to hash passwords with this tool?
For learning, yes, but never for real systems: password storage needs slow, salted algorithms like bcrypt or Argon2, and pasting real passwords into any web tool is bad practice regardless.