Hash Generator

Generate MD5, SHA-1, and SHA-256 hashes from any text. Client-side only — your data never leaves your browser.

input
MD5
SHA-1
SHA-256

SHA-1 and SHA-256 use the browser's native Web Crypto API. MD5 computed in pure JS.

What is a hash function?

A cryptographic hash function takes an input of any length and produces a fixed-length output (the hash or digest). The same input always produces the same hash, but even a single character change produces a completely different result. Hashes are one-way — you cannot reverse a hash to recover the original input.

MD5, SHA-1, and SHA-256 compared

MD5 produces a 128-bit (32 hex character) hash. It was widely used for checksums but is no longer considered secure for cryptographic purposes due to known collision vulnerabilities. Still useful for non-security tasks like verifying file integrity in trusted environments.

SHA-1 produces a 160-bit (40 hex character) hash. Like MD5, it has known weaknesses and should not be used for security-sensitive applications. Git historically used SHA-1 for object identification.

SHA-256 is part of the SHA-2 family and produces a 256-bit (64 hex character) hash. It is currently considered secure and is used in TLS certificates, Bitcoin, and most modern security protocols.

Use cases

  • Verify file integrity by comparing hashes before and after a download.
  • Generate SHA-256 checksums for software packages or build artifacts.
  • Check if two strings are identical without comparing them directly (e.g., passwords).

Frequently Asked Questions

Is this tool secure? expand_more
SHA-1 and SHA-256 are computed using the browser's built-in Web Crypto API. MD5 runs in pure JavaScript. Your text is never sent to any server.
Can I reverse a hash? expand_more
No. Hash functions are mathematically one-way. You cannot reverse a hash to recover the original text. Attackers use precomputed tables (rainbow tables) against weak passwords — this is why passwords should be salted before hashing.