Hash Generator
Compute MD5 and SHA hashes from text right in your browser
About this tool
This hash generator computes MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests from any text, entirely in your browser. A hash is a fixed-length fingerprint of your input: the same text always produces the same hash, but even a one-character change produces a completely different result. Developers use hashes to verify downloads and file integrity (checksums), to build cache keys and content addresses, and to index data. The SHA family is computed with the browser's built-in Web Crypto API; MD5 is included for legacy checksum use via a lightweight built-in implementation.
How to use
- 1 Type or paste the text you want to hash into the box.
- 2 All five hashes are computed instantly as you type.
- 3 Toggle between lowercase and UPPERCASE hexadecimal output.
- 4 Press the copy button next to any hash to copy it.
How it works
Your text is first encoded as UTF-8 bytes. The SHA-1, SHA-256, SHA-384 and SHA-512 digests are produced by the browser's Web Crypto API (crypto.subtle.digest), the same vetted implementation used for HTTPS and signatures, then shown as hexadecimal. MD5 is not offered by Web Crypto, so it is computed with a small built-in MD5 routine for compatibility with older checksums. A hash is one-way: you cannot reverse it back to the original text. As a known test vector, SHA-256 of "abc" is ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad.
Frequently asked questions
Is hashing the same as encryption?
No. Encryption is reversible with a key; hashing is one-way and cannot be undone. You use a hash to verify or fingerprint data, not to keep it secret and recover it later.
Which hash should I use?
Use SHA-256 or stronger for anything security-related. MD5 and SHA-1 are broken for security (collisions are feasible) and should only be used for non-security checksums or to match legacy systems.
Can I recover the original text from a hash?
No. Hashes are one-way functions, so the original input cannot be derived from the output. Short or common inputs can sometimes be guessed via lookup tables, which is why passwords need salting and slow hashing.
Does my text leave my device?
No. Hashing runs locally in your browser via the Web Crypto API and an in-page MD5 routine, so your input is never uploaded.
Related tools and uses
To make data text-safe for transport, use the Base64 encoder. To format and validate structured data, see the JSON formatter. For character code points, try the ASCII / Unicode converter.