Hash Generator

MD5, SHA-1, SHA-256, SHA-512 of text or files.

No upload

Loading tool…

Processing happens on your device using your browser's CPU/GPU. Results are kept only in this tab's memory and are wiped when you click “Clear” or close the page.

About Hash Generator

Type some text or pick a file and get its MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests at once. The usual reason is verification: a download page publishes a SHA-256 checksum, you hash the file you actually received, and the two strings must match character for character. Developers also use it to check API signatures. Files are read by your browser and never uploaded.

How to use Hash Generator

  1. Type or paste text into the box, and all five digests appear as you type.
  2. For a downloaded file, click Hash a file (checksum) and choose it from your device.
  3. Tick Uppercase if the checksum you are comparing against is written in capitals.
  4. Use the Copy button next to the algorithm you need and compare it with the published value.

What people use it for

  • Verifying that an ISO, APK or installer you downloaded matches the publisher's SHA-256
  • Confirming a large file copied to a pen drive or shared over the network is byte-identical
  • Generating an MD5 or SHA-256 value that a legacy API or an assignment asks for
  • Checking a webhook signature while debugging an integration

Good to know

Hashing is one way: a digest cannot be turned back into the original text, and a hash is not encryption. MD5 and SHA-1 are still fine for spotting accidental corruption but are broken against deliberate tampering, so use SHA-256 or stronger for anything security related. Never store user passwords as a plain hash. Large files take a moment to read.

Frequently asked questions

Can I get the original text back from a hash?
No. Hashing is a one-way function, so there is no decode button here or anywhere else. Sites claiming to reverse a hash are simply looking up common values in a table.
Are MD5 and SHA-1 safe to use?
For detecting accidental file corruption, yes. For security, no. Both have practical collision attacks, so anything involving trust or signatures should use SHA-256 or SHA-512.
Is my file uploaded to check its checksum?
No. The file is read into memory in your browser and hashed with the Web Crypto API on your device. Nothing is transmitted, so even large private files are safe to check.
Should I hash passwords with this tool?
No. Passwords need a slow, salted algorithm such as bcrypt, scrypt or Argon2. A plain MD5 or SHA-256 of a password can be cracked at enormous speed.