Hash Generator

About this tool

A cryptographic hash turns any input into a fixed-length fingerprint. The same input always yields the same hash, and even a tiny change produces a completely different result. This tool computes SHA-1, SHA-256, SHA-384 and SHA-512 using your browser's built-in Web Crypto API — nothing is uploaded.

Common use cases

• Verify file integrity — Generate checksums to verify downloaded files have not been tampered with
• Hash passwords (learning) — Understand how cryptographic hashes work (note: use bcrypt/argon2 for real passwords)
• Create content hashes — Generate hashes for cache busting, deduplication, or content addressing

How it works

A cryptographic hash function takes arbitrary input and produces a fixed-size output (digest). SHA-1 produces 160 bits (40 hex chars), SHA-256 produces 256 bits (64 hex chars), SHA-384 produces 384 bits, and SHA-512 produces 512 bits. Hash functions are deterministic (same input always gives same output), fast to compute, and infeasible to reverse. A single bit change in input produces a completely different hash (avalanche effect).

FAQ

Do you support MD5?

No — the Web Crypto API doesn't include MD5 because it's cryptographically broken. Use SHA-256 or stronger for security-sensitive work.

Is my input sent anywhere?

No. Hashing runs entirely in your browser via the Web Crypto API.

Which hash should I use?

SHA-256 is the modern default. Use SHA-512 for extra length; avoid SHA-1 for security as it's deprecated.

Is SHA-256 secure for passwords?

No. SHA-256 is fast, making it vulnerable to brute-force attacks. For password hashing, use slow algorithms like bcrypt, scrypt, or Argon2 with a unique salt per password.

What is the difference between MD5, SHA-1, and SHA-256?

MD5 (128-bit) and SHA-1 (160-bit) are both cryptographically broken — collisions have been demonstrated. SHA-256 (256-bit) is part of the SHA-2 family and is currently secure for most use cases.