Hash Generator

Generate MD5, SHA-1, SHA-256, and SHA-512 hashes for text or files in your browser using the Web Crypto API.

Runs entirely in your browser. Nothing is sent to our servers.

Or hash a file (any size):
MD5 and SHA-1 are not suitable for security-sensitive uses (they're broken cryptographically). Fine for checksums.

About this tool

A hash function turns any input into a fixed-size fingerprint. Same input always produces the same output; tiny input changes produce wildly different output. This tool computes hashes locally in your browser: SHA family via the Web Crypto API, and MD5 via a pure-JS implementation.

Picking an algorithm

  • MD5 / SHA-1: only safe for non-security uses like file integrity checks against accidental corruption. Both are broken against deliberate collision attacks.
  • SHA-256: the modern default for almost everything — checksums, content addressing, blockchain, signature payloads.
  • SHA-384 / SHA-512: larger output, useful when you need extra collision resistance margin or to match an existing system that uses them.

Hashing is not password storage. For passwords, use a password-hashing function like Argon2, bcrypt, or scrypt — never a plain SHA. We don't offer those here because they should run on your server with the proper parameters, not in a generic browser tool.

Frequently asked questions

Why is MD5 still useful?
For non-adversarial integrity checks (verifying a download wasn't corrupted in transit), MD5 is fast and good enough. Just don't use it where an attacker could deliberately craft a collision.
Can this hash large files without running out of memory?
Yes for SHA algorithms — the Web Crypto API streams the file. MD5 currently reads the whole file in memory; for files larger than a few hundred MB, stick to SHA-256 or above.
Are hashes case-sensitive?
The hashes themselves are bytes. The hex output convention is lowercase, which we use here. 0xAB and 0xab represent the same byte; "ABC" and "abc" produce different hashes.
Does this tool send my file or text anywhere?
No. All hashing happens in your browser. Nothing is uploaded.

Last updated: May 17, 2026