Hash Generator

What is the Hash Generator?

A cryptographic hash function turns input of any length into a fixed-length fingerprint. The same input always gives the same hash, a tiny change gives a completely different one, and it is computationally infeasible to recover the input from the hash. This makes hashes ideal for verifying file downloads, detecting changes and building data structures.

Not all algorithms are equally safe. MD5 and SHA-1 are broken for security purposes because collisions can be produced deliberately, so use them only for non-security checksums. SHA-256 and SHA-512, part of the SHA-2 family, are the modern default. For storing passwords, none of these are appropriate on their own: use a slow, salted algorithm such as bcrypt, scrypt or Argon2.

When to use the Hash Generator

Hashes are used to verify that a downloaded installer matches the checksum published by its vendor, to detect whether a file or configuration changed, to build cache keys and ETags, and to create deterministic identifiers from content. They also appear in webhook signatures, commit identifiers and content-addressed storage. This generator is useful for quick manual comparisons, for checking test vectors while implementing a protocol, and for teaching how a tiny change in the input transforms the output completely.

How to use the Hash Generator

1. Type or paste the text you want to hash.
2. Select an algorithm: SHA-256 is the recommended default.
3. The hash appears instantly in hexadecimal; toggle uppercase if needed.
4. Compare it against a published checksum to verify integrity.
5. Copy the hash with one click.

Examples

Input:    hello
MD5:      5d41402abc4b2a76b9719d911017c592
SHA-1:    aaf4c61ddcc5e8a2dabede0f3b482cd9aea9434d
SHA-256:  2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824

Changing a single letter ("Hello") produces a completely different SHA-256 digest.

Common errors and tips

• Trailing newlines change the hash. hello and hello\n are different inputs.
• Text is hashed as UTF-8; the same visible text in another encoding yields a different hash.
• Do not hash passwords with plain SHA-256; use bcrypt, scrypt or Argon2 with a unique salt.
• To verify a file, compare its hash to the one published by the vendor, not one hosted on the same page as the download.
• Hashes are one-way. A hash cannot be "decrypted", only guessed by hashing candidate inputs.

Privacy: runs entirely in your browser

Hashing uses the Web Crypto API in your browser. Sensitive strings are never uploaded or recorded. This tool runs entirely in your browser: nothing you enter is uploaded, stored or logged on our servers, and it keeps working even if you go offline after the page has loaded.