Paste text or choose a file and see its MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes update live. Everything is computed on your own device — your text and files are never uploaded.
A hash function turns any input into a fixed-length fingerprint. The same input always gives the same hash, and changing even one character changes it completely, which makes hashes useful for checking that a download or a file has not been altered, for cache keys, and for deduplication.
MD5 and SHA-1 are fine for checksums and non-security uses, but they are broken for security purposes — do not use them for signatures or password storage. SHA-256 and SHA-512 are the modern defaults. For passwords you should use a dedicated slow algorithm such as bcrypt, scrypt or Argon2 rather than any plain hash.
If you need random hex strings in hash-shaped lengths for test data rather than the hash of real input, use the random hash generator. For secrets such as API keys and session tokens, try the secret key generator.
Frequently asked questions
Is my text sent to a server?
No. Hashing runs in your browser using the Web Crypto API and a built-in MD5 routine. Text and files never leave your device.
Which hash should I use?
SHA-256 for most purposes. MD5 and SHA-1 are only suitable for non-security checksums.
Can I hash a file?
Yes. Choose a file under the text box and its hashes appear. You can compare them against the checksum published by the download's author.
Why does the hash change when I add a space?
Hashes are sensitive to every byte of input, so a trailing space or different line ending produces a completely different result.
Can a hash be reversed?
Not directly. Short or common inputs can be guessed by trying candidates, which is why passwords need salted, slow hashing.