Developers
Hash Generator
The MD5, SHA-1, SHA-256 or SHA-512 fingerprint of any text or file, in an instant.
Digest
Checking that a download was not tampered with, comparing two exports, generating a cache key, verifying the checksum a vendor published: hashing is the basic tool of data integrity. Type some text or drop a file, pick the algorithm — MD5, SHA-1, SHA-256 or SHA-512 — and the hexadecimal digest appears immediately, ready to copy and compare. The computation runs entirely in your browser using the built-in cryptography API, so even a large or confidential file never leaves your machine. Free, no sign-up, no limits — and no command-line utility to install just to get a checksum on a locked-down workstation.
How does it work?
- Type your text or drop the file you want to hash.
- Pick the algorithm: MD5, SHA-1, SHA-256 or SHA-512.
- The hexadecimal digest appears instantly.
- Copy it and compare it with the expected value.
Frequently asked questions
Is MD5 still safe?
For security, no: MD5 collisions can be manufactured in seconds, so it is obsolete for signatures, certificates or password storage. For checking the integrity of a download or spotting a file changed by accident, however, it remains usable and is still widely published.
What is the difference between SHA-256 and SHA-512?
Both belong to the SHA-2 family and are considered secure. SHA-256 produces a 64-character hex digest, SHA-512 a 128-character one. SHA-256 is the de facto standard (TLS, blockchains, Git’s migration target); SHA-512 adds headroom and is sometimes faster on 64-bit processors.
Can a hash be decrypted?
No: hashing is one-way — it is not encryption. You cannot “decrypt” a hash; you can only try to recover the input by brute force or precomputed tables, which is only realistic for short or predictable inputs, such as weak passwords.
Should I hash passwords with this tool?
For anything serious, no: plain MD5 or SHA-256 are far too fast, which makes them easy to brute-force. Password storage calls for a dedicated, deliberately slow algorithm — bcrypt, scrypt or Argon2 — with a unique salt per user. This tool is for integrity checks, not authentication.