Hash Generator
Hash Generator — runs in your browser. Inputs are not stored.
Hash generator
Enter values, then press Calculate.
SHA uses Web Crypto (SubtleCrypto); MD5 is computed with browser-only JS. Nothing is sent to a server.
How to use
- Enter the string to hash in Text. Digests use UTF-8 bytes.
- Press Generate hash. SHA-256, SHA-1, SHA-512, and MD5 fill in together.
- Each result is a lowercase hex string. Select a field to copy.
- SHA family uses the browser Web Crypto (SubtleCrypto) API. Unsupported environments show a notice.
- Reset clears input and results. The original text is not sent to a server.
- This is a text UTF-8 hash, not a file hash. For binary integrity, use a dedicated file tool. You can compare all four algorithms at once.
Key concepts
A hash function maps arbitrary-length input to a fixed-length fingerprint. The same UTF-8 bytes always yield the same digest; a single character or newline change avalanche-shifts the output. SHA-256, SHA-1, and SHA-512 use subtle.digest; MD5 is a pure JavaScript implementation on this page. Hashes are one-way: you cannot mathematically recover the original from the digest alone.
For storing passwords, a dedicated KDF (Argon2, bcrypt, PBKDF2) plus salt is typical—not a single SHA-256. MD5 and SHA-1 have known collision attacks and are not recommended for signatures or security hashes; they remain useful for legacy checksums. For everyday integrity checks, prefer SHA-256 or SHA-512. This page is a reference generator and does not upload input. File binary hashes are out of scope.
Example
MD5 of hello is the 32-digit lowercase hex 5d41402abc4b2a76b9719d911017c592. SHA-256 is 64 hex digits, SHA-1 is 40, SHA-512 is 128. hello and Hello differ completely, so when matching server logs paste the original unchanged. All four fields fill at once so you can compare legacy MD5 with SHA-256 on one screen.
Related: URL encoder · Text ↔ hex · Character counter
Frequently asked questions
What is a SHA-256 generator used for?
Phrase integrity checks, cache-key comparison, and public checksum matching. It is not a substitute for storing login passwords as plain SHA-256.
Is SHA-256 always the same for the same sentence?
Yes, for the same UTF-8 bytes. Windows CRLF vs Unix LF alone changes the digest—paste the original unchanged.
Is MD5 secure?
Collisions are feasible. Do not use it for signatures or passwords. Use it only to match old systems or non-security checksums.
SHA-1 vs SHA-256?
Output length and current strength. SHA-1 (160-bit) is being phased out; SHA-256 (256-bit) is common for integrity. SHA-512 is a longer fingerprint.
Can I recover the original from a hash?
No. Short passwords may be guessed via dictionaries or rainbow tables, but the hash function itself has no inverse.
Is generator input sent to a server?
No. SHA uses Web Crypto and MD5 uses a page script; both run only in browser memory.
Last reviewed: 2026-09-04