Hash Generator
Runs entirely in your browser
Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes directly in your browser.
What is Hash Generator?
Hash Generator computes a fixed-length fingerprint of your text using several common hashing algorithms. The same input always produces the same hash, and even a tiny change in the input produces a completely different one — useful for verifying data integrity or comparing values without storing the original text.
How to use Hash Generator
- Type or paste your text into the Input box.
- Click Generate Hashes.
- Copy any of the MD5, SHA-1, SHA-256, SHA-384 or SHA-512 results.
Features
- Generates MD5, SHA-1, SHA-256, SHA-384 and SHA-512 in one pass.
- SHA-1/256/384/512 use the browser's native Web Crypto API.
- Individual copy buttons for each hash.
- 100% client-side — your text never leaves your browser.
Example
Hashing the text Toolbeel produces:
MD5: 9c5db4e0d118100d80e6083866e5c669
SHA-1: 2af4e2f7cd72a993df36de55f233c70d09647011
SHA-256: 75e2abd2a37ecb451426ed3f3a2f6c3a398dbd1064b26178b0b1ae802fdfbd93
SHA-384: 30e083e89d4ef48f4898acf3b95f0138339c05e468bed19f243dff3dc9f25e426e7e534417090eefb0883919f0338768
SHA-512: 7024b187a481157518320ec2185ccc282397daa5c667c6b3aa81f07235c3359d8624e9bf9efbe8d3a7e9a4dfb0ee74d71c976ee79e98665292897ecde9c5c341
Change even one character of the input — a capital letter, an extra space — and every algorithm above produces a completely different result.
Security notes
- The browser's built-in SubtleCrypto API doesn't implement MD5, so this tool includes its own pure-JavaScript MD5 implementation (RFC 1321) for that one algorithm. SHA-1, SHA-256, SHA-384 and SHA-512 all run through
crypto.subtle.digest(), the browser's native, audited implementation. - Output length tells you the algorithm's bit strength directly: MD5 is 128 bits (32 hex characters), SHA-1 is 160 bits (40 characters), SHA-256 is 256 bits (64 characters), SHA-384 is 384 bits (96 characters) and SHA-512 is 512 bits (128 characters).
- MD5 has practical collision attacks — two different inputs producing the same hash — and SHA-1 has a published one too (the 2017 "SHAttered" attack). Both are still fine for checksums or detecting accidental corruption, but neither should be relied on where someone might deliberately try to fake a match.
- None of these algorithms are appropriate for storing passwords, with or without a pinch of salt — they're deliberately fast, which makes them cheap to brute-force. Password storage needs a slow, purpose-built algorithm like bcrypt, scrypt or Argon2 on the server.
Is Hash Generator safe?
Yes. Hash Generator computes every hash locally — SHA-1, SHA-256, SHA-384 and SHA-512 through the browser's native crypto.subtle.digest(), and MD5 via a local JavaScript implementation since SubtleCrypto doesn't support it — so the text you hash never reaches a server.
Frequently Asked Questions
Can I use MD5 or SHA-1 to store passwords?
No. MD5 and SHA-1 are fast, general-purpose hashing algorithms — not designed for password storage. Passwords should use a slow, salted algorithm such as bcrypt, scrypt or Argon2, implemented server-side.
Which algorithm should I use?
SHA-256 is a good general-purpose default for checksums and data integrity checks. MD5 and SHA-1 are considered cryptographically broken and should only be used for legacy compatibility, never for security.
Will the same input always produce the same hash?
Yes. Hashing is deterministic — the same input and algorithm always produce the same output, which is why hashes are used to verify file integrity.