Security & accounts
Hash Generator — MD5, SHA-1, SHA-256, SHA-512
Compute four common hash values for any text at once, displayed side by side for quick comparison.
What is Hash Generator — MD5, SHA-1, SHA-256, SHA-512?
A hash function turns input of any length into a fixed-length string. The same input always produces the same output, but the output cannot be reversed back to the input. That property makes hashing the foundation for verifying file integrity, comparing content, and storing passwords.
This tool computes four hashes simultaneously: MD5, SHA-1, SHA-256 and SHA-512. The three SHA variants use the browser's built-in Web Crypto API. MD5 is not part of Web Crypto, so it is implemented directly in JavaScript following RFC 1321.
A word on security: MD5 and SHA-1 are both broken, meaning it is possible to deliberately construct two different inputs that produce the same hash. They remain fine for comparing file checksums, but must never be used for digital signatures or password storage. For anything security-related, use SHA-256 or stronger.
How to use
- Type or paste your content into the text area.
- All four hashes are computed instantly and update as you type.
- Click Copy on whichever algorithm you need.
- To verify a download, paste the checksum published by the provider and compare it character by character.
Frequently asked questions
Can I hash a file, or only text?
Text only, for now. For files, use the command already on your machine: certutil -hashfile filename SHA256 on Windows, or sha256sum filename on Linux and macOS. That approach is far faster for large files.
Why is MD5 still used if it is insecure?
Because those are two different jobs. For detecting accidental corruption in a download, MD5 works well and computes very quickly. What it can no longer do is resist a deliberate attacker — two different files can be crafted to share an MD5 hash. Fine for catching transmission errors; useless for proving authenticity.
Can a hash be reversed back to the original text?
No, hashing is one-way. Sites advertising MD5 decryption are simply looking up precomputed tables of common strings. Against long or random input, that approach fails.
Which algorithm should I use to store passwords?
None of these four. Password storage requires a slow, salted function such as bcrypt, scrypt or Argon2. SHA-256 is unsuitable precisely because it is fast — which means an attacker can try candidates just as fast.