Generate MD5, SHA1, SHA256, and SHA512 hashes from plain text directly in your browser. Hashes are computed server-side using PHP.
MD5, SHA-1, SHA-256 and SHA-512 hashes of any text, computed in your browser.
Runs in your browserDrag & drop a file here, or
Read and hashed in your browser - never uploaded. Up to 50 MB.
macOS has no sha256sum; use shasum -a 256 (or md5 for MD5). Swap the algorithm with the buttons above.
How to use the hash generator
Paste any text into the input field and click "Generate hashes". The tool instantly calculates MD5, SHA1, SHA256, and SHA512 hashes using your browser's built-in Web Crypto API. No data is sent to any server.
Examples
Empty string MD5 = d41d8cd98f00b204e9800998ecf8427e
FAQ
What is a hash function?
A hash function takes an input of any length and produces a fixed-length output called a hash or digest. The same input always produces the same hash, but even a tiny change in the input produces a completely different hash.
Hash functions are one-way - it is computationally infeasible to reverse a hash back to the original input. They are widely used for verifying file integrity, storing passwords, and digital signatures.
What is the difference between MD5, SHA1, SHA256, and SHA512?
These are different hash algorithms with different output sizes and security levels:
- MD5 - 128-bit output (32 hex characters). Fast but cryptographically broken. Use only for checksums, not security.
- SHA1 - 160-bit output (40 hex characters). Also deprecated for security use. Still seen in older systems.
- SHA256 - 256-bit output (64 hex characters). Part of the SHA-2 family. Widely used and considered secure.
- SHA512 - 512-bit output (128 hex characters). Stronger than SHA256, used when maximum security is needed.
Can I reverse a hash back to the original text?
No. Hash functions are designed to be one-way. There is no mathematical way to reverse a hash to its original input.
However, attackers can use rainbow tables (precomputed hash databases) or brute-force attacks to guess common inputs like simple passwords. This is why passwords should always be hashed with a salt using dedicated functions like bcrypt or argon2 rather than raw SHA or MD5.
Is MD5 safe to use?
MD5 is not safe for cryptographic purposes. Collisions have been demonstrated - meaning two different inputs can produce the same MD5 hash. This makes it unsuitable for digital signatures, certificate validation, or password storage.
MD5 is still useful for non-security tasks such as checking file integrity when you trust the source, or generating cache keys. For any security-sensitive use, choose SHA256 or SHA512.
What is SHA256 used for in practice?
SHA256 is one of the most widely deployed hash algorithms in IT:
- TLS/SSL certificates - websites use SHA256 for certificate signatures
- Bitcoin - SHA256 is used in the proof-of-work algorithm
- File integrity verification - Linux package managers use SHA256 checksums
- API request signing - AWS, GitHub, and others use HMAC-SHA256
- Git - historically used SHA1, now migrating to SHA256
Related guides and tools
Related guides
- How to Generate SSL Certificates with OpenSSL - generating the certificate that the CA then signs
- Get-FileHash and certutil hashfile on Windows - computing and comparing the hashes this tool generates, from PowerShell and from the command prompt
- OpenSSL Cheat Sheet: OpenSSL commands for hashes, keys and certificates, on one printable page.
- Verifying downloads on Linux with sha256sum - writing and checking a SHA256SUMS manifest on Linux, where this tool handles one value at a time