This hash generator computes the MD5, SHA-1, SHA-256, SHA-384 and SHA-512 fingerprint of any text or file. A hash is a fixed-length digest: change a single byte of the input and the hash changes completely, which is why it is used to verify downloads, find duplicate files and confirm data has not been altered.
Everything is computed in your browser with the Web Crypto API (MD5 with a built-in implementation): your files are never uploaded.
How to use
- 1Choose whether to hash a piece of text or a file.
- 2Type the text or drop the file: MD5, SHA-1, SHA-256, SHA-384 and SHA-512 are computed at once.
- 3Pick the output format: lowercase hex, uppercase hex or Base64.
- 4To verify a download, paste the official checksum and see whether it matches.
What you can do
- MD5, SHA-1, SHA-256, SHA-384 and SHA-512
- Hash text or files
- Compare against an expected checksum
- Hex or Base64 output
How to verify a downloaded file
Many sites publish a checksum next to their downloads, usually SHA-256. Drop the downloaded file, paste that value into “Compare with an expected checksum” and the tool tells you which algorithm it matches. If it matches none, the file is corrupted or is not the original.
Which algorithm to use
SHA-256 is today's standard for integrity checks. MD5 and SHA-1 still appear in older systems and catch transmission errors, but they should not be used for security because collisions are known.
- MD5 (128-bit): quick checks and legacy compatibility.
- SHA-1 (160-bit): obsolete for security; still used by some tools.
- SHA-256 (256-bit): recommended for verifying downloads and signatures.
- SHA-384 and SHA-512: longer digests for environments that require them.
A hash is not encryption
A hash cannot be “decrypted”: it is a one-way function. On its own it is also not the right way to store passwords; slow, salted algorithms such as Argon2 or bcrypt are used for that.
Frequently asked questions
What is a SHA-256 hash?
A 256-bit (64 hex characters) digest that uniquely identifies some content. Any change, however small, produces a completely different hash.
Can an MD5 hash be reversed?
It cannot be decrypted, but MD5 hashes of common passwords appear in public lookup tables, which is why MD5 is not safe for protecting passwords.
Are my files uploaded?
No. Hashing happens in your browser; the file never leaves your device.
Is there a file size limit?
The SHA algorithms handle large files. MD5 loads the whole file into memory, so it is limited to about 200 MB to keep the browser responsive.