Hash Generator

About Hash Generator

Hash Generator computes MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes from text or files at the same time. In text mode the hashes update as you type; in file mode you drag and drop a file (or pick one) to get its checksum and compare it with the value published by a download site. An uppercase toggle switches the hex output case, and MD5 and SHA-1 are labeled as insecure so you know which ones to avoid. Hashing uses the browser's Web Crypto API and runs locally, so your text and files are never uploaded.

How to use

1. Choose Text Mode to hash typed text, or File Checksum to hash a file from your device.
2. In Text Mode, type or paste into the Text Input box; hashes update as you type. Click CLEAR to empty it.
3. In File Checksum, drag and drop a file onto the drop zone or click it (or focus it and press Enter or Space) to pick one, then wait for the progress bar.
4. Read the MD5, SHA-1, SHA-256, SHA-384 and SHA-512 results under Hash Results, each marked Secure or Insecure.
5. Turn on the Uppercase switch for capital hex output, then click Copy beside any hash to copy it.
6. Click Remove to clear the current file and hash a different one.

Limitations & notes

• MD5 and SHA-1 are marked Insecure and suit only non-security checks; none of these plain hashes should be used to store passwords.
• Text is hashed exactly as typed in UTF-8, so a trailing space or line break changes every hash.
• File checksums load the entire file into browser memory first, so very large files may be slow or fail to hash.
• Switching between Text Mode and File Checksum clears the current input and results.
• The Uppercase switch only changes how letters are displayed; the hash value itself is the same.

FAQ

What is a hash?

A hash function turns any input into a fixed-length fingerprint. The same input always gives the same hash, and even a one-character change produces a completely different result.

Is MD5 secure?

No. MD5 and SHA-1 have practical collision attacks, so they should not be used for security purposes such as signatures. They are still fine for non-security checks like spotting accidental file corruption. Use SHA-256 or stronger for anything security-related.

Can a hash be decrypted or reversed?

No. Hashing is one-way, so there is no key to decrypt it. "Reversing" sites only look up hashes of common inputs in precomputed tables.

How do I verify a file checksum?

Switch to File Checksum mode, drop the file in, and compare the result with the checksum published by the source, usually SHA-256. If the strings match exactly, the file is intact.

Should I use SHA-256 to store passwords?

Not on its own. Plain SHA hashes are fast, which makes brute-forcing easy. Use a dedicated password hashing algorithm such as Argon2, bcrypt or scrypt.