How do I generate a hash?
Type or paste any text into the box above and hashes will appear instantly below, one for each algorithm you've selected in the settings. If you'd rather hash a file, tick 'Hash a file instead of text' and choose a file from your device – nothing is uploaded, the whole thing happens in your browser.
Use the settings to choose which algorithms to show (MD5, SHA-1, SHA-256, SHA-384 or SHA-512) and whether to display the output in uppercase.
What is a hash?
A hash function takes any input, text, a file, anything, and turns it into a fixed-length string of characters called a hash (or digest). The same input always produces the same hash, but even a tiny change to the input produces a completely different one, which makes hashes useful for verifying that data hasn't been altered.
Which algorithm should I use?
SHA-256 is the most widely recommended general-purpose algorithm today – it's fast, well-supported and has no known practical weaknesses. SHA-384 and SHA-512 offer a larger output for applications that want extra headroom.
MD5 and SHA-1 are both considered cryptographically broken and shouldn't be used to protect anything sensitive, but they're still commonly used for non-security purposes like checksums, cache keys or verifying file integrity against a publisher's published hash.
Is my data uploaded anywhere?
No. Hashing is done entirely in your browser using the Web Crypto API (and a local MD5 implementation, since MD5 isn't part of that standard), so neither your text nor your file ever leaves your device.
Can I use this to verify a file download?
Yes. Many downloads are published alongside a checksum (often SHA-256). Tick 'Hash a file instead of text', select the downloaded file, and compare the generated hash against the one published by the source – if they match, the file hasn't been corrupted or tampered with.
How is this different from a password?
A hash is a one-way fingerprint of data, not a secret you choose – you can't reverse it back into the original input. If you're after something to actually remember or protect an account with, you want the password generator instead.