Hash Generator
Web CryptoGenerate MD5, SHA-1, SHA-256, SHA-384, and SHA-512 digests with hex or base64 output.
Digest
No Digest
Type text and the digest appears instantly
About Hash Generator
Pick an algorithm and type or paste any text. The digest updates instantly as you type. SHA variants are computed with the browser's native WebCrypto implementation, while MD5 uses a compact RFC 1321 implementation included in the page - no external service is involved.
Choose hex (the familiar 40/64-character form) or base64 output, and optionally uppercase the result. Common uses include checking file or payload checksums, verifying configuration values, and generating deterministic identifiers.
Hashing is one-way: the original text cannot be recovered from the digest. Everything runs locally, so sensitive strings never leave your device.
Features & Highlights
- MD5, SHA-1, SHA-256, SHA-384, and SHA-512
- Live digest as you type
- Hex and base64 output
- Uppercase formatting option
- Digest length shown in bits
- 100% client-side with Web Crypto
Hash Generator FAQ
Find answers to common questions about MD5, SHA digests, and how hashing protects your data.
What is the difference between MD5 and SHA-256?
MD5 produces a 128-bit digest and is fast but cryptographically broken for security use. SHA-256 produces a 256-bit digest and is the standard for integrity checks and signatures. Prefer SHA-256 or SHA-512 for anything security-related.
Can a hash be reversed?
No. Hashing is one-way by design - the digest cannot be turned back into the original text. For passwords, always pair a hash with a per-user salt (and prefer dedicated algorithms like bcrypt or Argon2).
Why do hashes look different for the same text?
A given text always produces the same digest for the same algorithm and encoding. If two hashes differ, either the algorithm, the encoding (hex vs base64), the case, or the exact input (including whitespace) differs.
Is it safe to hash sensitive text here?
Yes. Hashing runs entirely in your browser using WebCrypto - the text is never transmitted, logged, or stored. Sensitive values are still better hashed with a salt offline, but nothing leaves your device here.
What is a checksum and how do I use it?
A checksum is a digest used to verify that data was not corrupted or tampered with. Compare the digest of a downloaded file against the publisher's published hash: if they match, the file is intact.
Why is MD5 still included if it is broken?
Many legacy systems, database schemas, and APIs still reference MD5 values. The tool includes it for compatibility and verification of existing hashes, with a clear warning to prefer SHA-2 for new work.