Hash Generator
CryptoGenerate SHA-1, SHA-256, SHA-384, SHA-512 hashes from text with hex output, plus MD5 and RIPEMD-160. Perfect for checksums and file integrity verification.
— type something above to get hashes —— type something above to get hashes —— type something above to get hashes —— type something above to get hashes —— type something above to get hashes —— type something above to get hashes —About Hash Generator
A hash function maps input of any length to a fixed-length output, and the same input always produces the same hash. This tool supports SHA-1, SHA-256, SHA-384, and SHA-512 — all computed locally via the browser's native SubtleCrypto API, which is FIPS 180-4 compliant. SHA-1 produces a 160-bit (40 hex char) digest, while SHA-256 (64 hex), SHA-384 (96 hex), and SHA-512 (128 hex) offer increasing collision resistance. Output is available in both lowercase and uppercase hexadecimal formats, with optional HMAC key input for authenticated hashing. Your input never reaches any server — all computation stays on your device. Tip: Bookmark this tool for quick access whenever you need to generate keys or hashes. All processing happens locally in your browser — no data upload, so it is safe to use with sensitive material.
How to Use
- Open the Hash Text tool
- Paste the text to hash in the input field
- Automatically computes and displays MD5, SHA-1, SHA-256, SHA-512, and more
- Supports file hashing: switch to File mode and upload a file
- Click the copy button next to any hash value
Use Cases
- File integrity check — Compare a downloaded file's SHA-256 against the publisher's announced value to confirm it has not been tampered with.
- Password preprocessing — Useful with a salt, but for password storage prefer bcrypt (see our Bcrypt Hash tool).
- Git commit verification — Git identifies commits by SHA-1; this tool lets you manually recompute and verify a commit's content hash.
- API request signing — Combine with HMAC (see our HMAC Generator) to produce signed API requests.
- Deduplication and cache keys — Use a content hash as a cache key — identical content stores only once.
- File integrity verification — Compute SHA-256 hashes of downloaded files and compare against the publisher's checksum to detect corruption or tampering.
- Avalanche effect demo — Demonstrate how even a single-character change in input produces a completely different hash output for educational purposes.
FAQ
Is SHA-1 still safe?
Not for cryptographic purposes (Google demonstrated a collision in 2017), but it remains acceptable for non-adversarial uses like checksums and Git commit IDs.
SHA-256 vs SHA-512 — which is safer?
Both are secure. SHA-512 outputs longer hashes (128 hex chars vs 64) but is slightly slower. SHA-256 is sufficient for nearly all use cases.
Why no MD5?
MD5 was broken in 2004 (Wang Xiaoyun et al.) and should not be used in any new code. Modern browsers also no longer expose MD5 in Web Crypto API.
Will the same input always produce the same hash?
Yes. Hash functions are deterministic — the same input always yields the same output, which is exactly why they work for verification.
Can I reverse a hash back to the original text?
No. Hashes are one-way. However, short or weak inputs are vulnerable to dictionary or rainbow-table attacks — which is why password storage uses bcrypt + salt.
Any browser compatibility requirements?
This tool works in all modern browsers (Chrome, Firefox, Edge, Safari). No plugins or extensions required.
Can I use it offline?
After initial load, most features work offline. The core logic runs entirely in your browser with no network dependency.
Comments
Comments are stored locally in your browser. Configure Giscus for cloud-based comments.