Hash Generator
Create MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes from text or a file, add a secret key for HMAC, and compare against a hash you already have. Free, and nothing leaves your browser.
Files up to 200 MB. The file is read in your browser and never uploaded.
How to generate a hash
Type or paste text into the box, or switch to File and pick a file. The MD5, SHA-1, SHA-256, SHA-384 and SHA-512 results appear straight away and update as you type. Press Copy next to the one you need. If you already have a hash to check, paste it into the compare box and the page tells you whether it matches any of the results.
Which algorithm should you use?
| Algorithm | Output size | Hex length | Use it for |
|---|---|---|---|
| MD5 | 128 bits | 32 | Checking a download against a published checksum, cache keys, quick duplicate checks. Not safe against deliberate tampering. |
| SHA-1 | 160 bits | 40 | Old systems and Git object names. Collisions can be forced, so do not use it for new security work. |
| SHA-256 | 256 bits | 64 | The usual choice today: file integrity, digital signatures, certificates, blockchains. |
| SHA-384 | 384 bits | 96 | Higher security margin, used in some TLS and government profiles. |
| SHA-512 | 512 bits | 128 | Longer output and often faster than SHA-256 on 64-bit processors. |
Checking a download
Software sites often publish a SHA-256 or MD5 value next to the download link. Hash the file you downloaded and compare: if every character matches, the file is the same as the original. A single changed byte produces a completely different hash. Take the published hash from the official site, not from the same page that served the file if that page could be altered.
What HMAC adds
An HMAC mixes a secret key into the hash. Only someone who knows the key can produce the same value, so it proves that a message came from the key holder and was not altered. It is used to sign API requests and webhooks. Tick HMAC, type the key as text, and every row switches to the keyed result. HMAC-SHA-256 is the most common choice.
Hashing is not encryption, and not for storing passwords
A hash cannot be turned back into the original text, but short or common inputs can be guessed by trying many candidates, and fast hashes such as MD5 and SHA-256 make that quick. Passwords should be stored with a slow, salted function such as bcrypt, scrypt or Argon2, not with a plain hash from this page.
Known test values
You can confirm the tool against these standard results. The first column of hashes is for empty text, the second for the three letters abc.
| Algorithm | Empty text | abc |
|---|---|---|
| MD5 | d41d8cd98f00b204e9800998ecf8427e | 900150983cd24fb0d6963f7d28e17f72 |
| SHA-1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 | a9993e364706816aba3e25717850c26c9cd0d89d |
| SHA-256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 | ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad |
| SHA-384 | 38b060a751ac96384cd9327eb1b1e36a21fdb71114be07434c0cc7bf63f6e1da274edebfe76f65fbd51ad2f14898b95b | cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
| SHA-512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e | ddaf35a193617abacc417349ae20413112e6fa4e89a97ea20a9eeee64b55d39a2192992a274fc1a836ba3c23a3feebbd454d4423643ce80e2a9ac94fa54ca49f |
Privacy
The hashing runs in your browser. SHA results use the Web Crypto API built into the browser and MD5 runs from code on this page. Your text and files are not uploaded, logged or stored.
Frequently asked questions
Is my text or file uploaded anywhere?
No. All hashing happens in your browser. Nothing is sent to a server, so it is safe to hash private text or files.
Why does my MD5 not match another site?
Usually the input differs by something invisible: a trailing space or new line, different line endings, or a different text encoding. This page hashes the text as UTF-8 exactly as typed. For files, the file bytes are hashed, so the result matches command-line tools such as md5sum or sha256sum.
Can a hash be reversed to get the original text?
Not directly. A hash is a one-way function. Short or common text can still be found by guessing and hashing candidates, which is why plain hashes are a poor way to store passwords.
Is MD5 still safe to use?
It is fine for checking that a file was not corrupted, but it is broken for security because different inputs with the same MD5 can be created on purpose. Use SHA-256 or stronger when someone could try to tamper with the data.
What is the largest file I can hash here?
200 MB. The file is read into the memory of your browser tab, so very large files are better handled with a command-line tool such as sha256sum.
Does uppercase change the hash?
No. Uppercase only changes how the same hexadecimal digits are written. Comparison here ignores case.
Related tools
JSON Formatter Base64 Encode & Decode UUID Generator Password Generator JWT Decoder