How to use the Hash Generator

Generate cryptographic hashes — MD5, SHA-1, SHA-256, SHA-384, SHA-512 — from any text or file. Use the digests for file integrity verification, fingerprinting, cache keys, deterministic IDs, and quick comparisons. The hash is computed entirely in your browser using Web Crypto and the input never leaves your machine.

What it does

Generates digests in MD5, SHA-1, SHA-256, SHA-384, and SHA-512.
Hashes text (UTF-8) and files (binary, any size your browser can read).
Outputs in lowercase hex (default), uppercase hex, or Base64.
Computes hashes live as you type for short inputs; chunked streaming for files.
Side-by-side comparison against a known hash for verification.

When to use it

Verify a downloaded file's checksum against a published SHA-256.
Generate a deterministic cache key from a piece of content.
Fingerprint a config or response for change detection.
Produce a stable test fixture identifier from known input.
Confirm two pieces of text are byte-identical without copying them around.
Generate an ETag or content hash for HTTP caching.

How to use it

Type or paste your text (or drop a file).
Pick the algorithm: SHA-256 is the modern default; MD5 only for legacy checksums.
Pick the output format: hex (most common) or Base64.
Copy the digest, or paste a known hash in the compare field to verify equality.

Tips & pitfalls

MD5 and SHA-1 are not collision-resistant. Use them only for non-security checksums; pick SHA-256 or stronger for anything security-relevant.
Hashing is one-way — you cannot reverse a hash back to the original input.
Hash output differs between formats: hex is twice the byte length; base64 is shorter.
Whitespace and line endings affect the hash — normalize first if you're comparing across systems.
For password storage, never use raw MD5/SHA — use a slow KDF (bcrypt, scrypt, Argon2).
Large files are hashed in streaming chunks — the tool stays responsive on multi-GB inputs.

FAQ

How do I generate a SHA-256 hash online? Paste text, pick SHA-256, and copy the result. The browser computes the digest locally.
What is the difference between MD5 and SHA-256? MD5 is older, faster, but cryptographically broken. SHA-256 is the modern default for integrity and fingerprints.
Can I hash a file in the browser? Yes — drop the file in. Hashing runs locally with chunked streaming.
Is hashing reversible? No — by design. You cannot recover input from a hash. Tools that "decrypt hashes" only look up known rainbow tables.
Is my input uploaded? No. All hashing uses Web Crypto in your browser.
Which algorithm should I use for passwords? None of these directly — use a slow password hash like bcrypt, scrypt, or Argon2 in your backend.
Why do hex and Base64 outputs look different? Same hash, different encoding of the same bytes. Hex is twice as long; Base64 is more compact.

Runs locally in your browser using Web Crypto. No uploads. MD5 and SHA-1 are checksum-only — use SHA-256+ for anything security-relevant.

Hash Generator (MD5, SHA-1, SHA-256, SHA-512)

Input text

Hash, Checksum & HMAC Workbench

Password hashing

Identifier privacy

API signatures

How to use the Hash Generator

What it does

When to use it

How to use it

Tips & pitfalls

FAQ