Hash Generator

About this tool

A cryptographic hash function takes an input of any length and produces a fixed-length output called a hash, digest, or checksum. The same input always produces the same hash, but even a single character change in the input results in a completely different hash (the avalanche effect). Hashes are one-way: it is computationally infeasible to reverse a hash to its original input. This tool computes MD5, SHA-1, SHA-256, and SHA-512 digests entirely in your browser using the Web Crypto API. Common uses include verifying file integrity, storing passwords (with a salt), generating checksums, and creating fingerprints for deduplication.

How to use

1. 1Type or paste the text you want to hash into the input field.
2. 2All four hashes (MD5, SHA-1, SHA-256, SHA-512) are computed instantly as you type.
3. 3Click the copy icon next to any hash to copy it to your clipboard.
4. 4Your input is never sent to a server — hashing happens entirely in your browser.

Frequently asked questions

What is the difference between MD5, SHA-1, SHA-256, and SHA-512?

MD5 and SHA-1 are older algorithms that are no longer considered cryptographically secure against collision attacks—avoid them for security-sensitive uses. SHA-256 and SHA-512 are part of the SHA-2 family: they are secure, widely trusted, and recommended for new applications. SHA-512 is slower but produces a larger, marginally stronger hash.

Can a hash be reversed to get the original input?

No, not in any practical sense. Hash functions are designed to be one-way. However, common inputs like short passwords can be looked up in pre-computed 'rainbow table' databases. This is why passwords should always be hashed with a unique salt and a password-specific algorithm like bcrypt or Argon2, not just SHA-256.

What does "same input always gives the same hash" mean for security?

It means hashes are deterministic. For file integrity this is a feature: verify a download by comparing its SHA-256 hash to the one the publisher listed. For passwords it is a weakness: two users with the same password get the same hash, which is why a unique random salt must be added before hashing.

Does the input leave my browser?

No. Hashing is performed entirely in your browser using the Web Crypto API. Your input is never sent to any server.