Generate MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes from text or files — entirely in your browser.
A cryptographic hash function takes any input — a word, a file, a terabyte of data — and produces a fixed-length digest (the "hash"). The same input always produces the same output, but changing even one character produces a completely different hash. This property, called the avalanche effect, is what makes hashes useful for data integrity verification.
Type hello in the input above. You'll immediately see:
SHA-256: 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824
MD5: 5d41402abc4b2a76b9719d911017c592
These hashes are one-way — you cannot reverse them to recover the original text. This makes them ideal for storing password digests (though for passwords, use bcrypt or Argon2, not raw SHA).
When you download software, publishers often provide a SHA-256 checksum alongside the file. After downloading, hash the file with this tool and compare — if the hashes match, the file arrived intact and untampered. This is the primary use of MD5/SHA-256 in package managers and software distribution.
Learn more about password security and hashing in our guide →
Use SHA-256 or SHA-512 for integrity checks and general use. Avoid MD5 and SHA-1 for anything security-related, as both are broken for collision resistance, though they are still fine for non-security checksums.
No. A hash is one-way. The same input always gives the same hash, but there is no way to reverse it; attackers instead guess inputs and compare, which is why passwords need slow salted hashes rather than plain SHA-256.
No. Hashing runs entirely in your browser using the Web Crypto API. Nothing you type or select is sent to the server.